CVE-2024-9680

The repository provides a detailed writeup on CVE-2024-9680, a use-after-free vulnerability in Firefox's CSS Animation Timeline, but does not include functional exploit code. It explains the vulnerability mechanics and potential exploitation paths.

This repository contains a proof-of-concept exploit for CVE-2024-9680, a critical use-after-free vulnerability in Firefox's animation timeline management, allowing remote code execution. The exploit leverages heap spraying and UAF triggers through SVG animation manipulation.

This script checks the installed versions of Mozilla Firefox and Thunderbird against known safe versions to detect outdated installations. It uses subprocess to execute version commands and compares the output with predefined safe versions.