Firefox ESR 115.11 · PDF.js Arbitrary JavaScript execution
Source Exploit-DB RSS Feed
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 11 Jun 2025, 21:10 UTC
What to do
AI-suggested
1. Immediate deployment of Firefox ESR versions later than 115.11 once patches are released by Mozilla. Monitor Mozilla security advisories closely for updates. 2. Implement strict email filtering and attachment scanning to detect and quarantine suspicious PDF files, especially those originating from untrusted sources. 3. Disable or restrict PDF.js usage in Firefox ESR via enterprise policies or configure Firefox to open PDFs externally in a dedicated PDF reader that is not vulnerable. 4. Educate users on the risks of opening unsolicited or unexpected PDF attachments and encourage verification of document sources. 5. Employ endpoint detection and response (EDR) solutions capable of detecting anomalous JavaScript execution within browsers. 6. Use sandboxing or virtualization for opening PDF files in isolated environments to prevent lateral movement or system compromise. 7. Regularly audit and update browser configurations and extensions to minimize attack surface. 8. Consider network-level controls to block or monitor PDF file downloads from untrusted or unknown sources. 9. Maintain comprehensive backups and incident response plans to quickly recover from potential breaches.
Description
Firefox ESR 115.11 - PDF.js Arbitrary JavaScript execution
Indicators of compromise
Exploit source code
# Exploit Title: Firefox ESR 115.11 - Arbitrary JavaScript execution in
PDF.js
# Date: 2025-04-16
# Exploit Author: Milad Karimi (Ex3ptionaL)
# Contact: miladgrayhat@gmail.com
# Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL
# MiRROR-H: https://mirror-h.org/search/hacker/49626/
# Vendor Homepage: https://wordpress.org
# Version: = 115.11
# Tested on: Win, Ubuntu
# CVE : CVE-2024-4367
#!/usr/bin/env python3
import sys
def generate_payload(payload):
backslash_char = "\\"
fmt_payload…