CVE-2024-34342

HIGH

react-pdf <7.7.3 and 8.0.0-8.0.2 - PDF.js JavaScript Execution

Title source: manual

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-34342. PoCs published by LOURC0D3.

AI-analyzed exploit summary This repository contains a functional Python script that generates a malicious PDF file exploiting CVE-2024-4367 in PDF.js. The exploit leverages a missing type check in font handling to achieve arbitrary JavaScript execution in the context of the hosting domain.

Description

react-pdf displays PDFs in React apps. If PDF.js is used to load a malicious PDF, and PDF.js is configured with `isEvalSupported` set to `true` (which is the default value), unrestricted attacker-controlled JavaScript will be executed in the context of the hosting domain. This vulnerability is fixed in 7.7.3 and 8.0.2.

Exploits (1)

github WORKING POC 191 stars

by LOURC0D3 · pythonpoc

https://github.com/LOURC0D3/CVE-2024-4367-PoC

View Code ZIP pw:eip

This repository contains a functional Python script that generates a malicious PDF file exploiting CVE-2024-4367 in PDF.js. The exploit leverages a missing type check in font handling to achieve arbitrary JavaScript execution in the context of the hosting domain.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: PDF.js (Firefox < 126, Firefox ESR < 115.11, Thunderbird < 115.11)

No auth needed

Prerequisites: PDF.js configured with isEvalSupported set to true (default) · Victim must open the malicious PDF file

MITRE ATT&CK