CVE-2015-4495 PoC — 多款Mozilla产品PDF阅读器安全漏洞

Source

https://github.com/vincd/CVE-2015-4495

Associated Vulnerability

Title:多款Mozilla产品PDF阅读器安全漏洞 (CVE-2015-4495)
Description:The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.

Description

Exploit for CVE-2015-4495 / mfsa2015-78

Readme

# CVE-2015-4495
Exploit for CVE-2015-4495 / mfsa2015-78

## How to use
Add your logic in the `parse_directory_listing` function.

## Usage
```bash
$ git clone https://github.com/vincd/CVE-2015-4495.git
$ cd CVE-2015-4495
$ python -m SimpleHTTPServer
```

Then open an unpatch Firefox (version < 39.0.3). A popup should spawn with the content of `/`.

# Credits
http://paste.ubuntu.com/12030863/

File Snapshot


 [4.0K]  /data/pocs/7781a9073b491361a12814a989dffae590fe3f0d
├── [ 209]  index.html
├── [6.3K]  main.js
└── [ 395]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!