CVE-2024-9680
CRITICAL KEV RANSOMWAREFirefox < 131.0.2 and ESR < 128.3.1 and ESR < 115.16.1 - Use-After-Free in Animation Timelines
Title source: llmExploitation Summary
CVE-2024-9680 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added October 15, 2024, with confirmed use in ransomware campaigns. EIP tracks 3 public exploits from researchers including tdonaworth, moscovium-mc, PraiseImafidon.
AI-analyzed exploit summary The repository provides a detailed writeup on CVE-2024-9680, a use-after-free vulnerability in Firefox's CSS Animation Timeline, but does not include functional exploit code. It explains the vulnerability mechanics and potential exploitation paths.
Description
An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.
Exploits (3)
The repository provides a detailed writeup on CVE-2024-9680, a use-after-free vulnerability in Firefox's CSS Animation Timeline, but does not include functional exploit code. It explains the vulnerability mechanics and potential exploitation paths.
This repository contains a proof-of-concept exploit for CVE-2024-9680, a critical use-after-free vulnerability in Firefox's animation timeline management, allowing remote code execution. The exploit leverages heap spraying and UAF triggers through SVG animation manipulation.
This script checks the installed versions of Mozilla Firefox and Thunderbird against known safe versions to detect outdated installations. It uses subprocess to execute version commands and compares the output with predefined safe versions.
References (8)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H