A tale about chained vulnerabilities in Firefox

Copyright © 2013 viaForensics, LLC Training: Intro to viaLab

Firefox-

A tale about chained vulnerabilities


Introduction

●

●

●…


Issue I - This is not the activity you were looking for

●

●

■■■

●

●


Issue I - Constraints


Issue II - Mr. JavascriptYes, I really like Tarantino’s films

●

■

■

● …

■

■

■


Temporary Solution


Results


Issue II - Constraints


Issue III - I know your secrets

●

●


Solution

●


Solution

● …

●


In short

●

■

■

■


Issue IV - One symlink to pwn them all

●

■


Issue IV - One symlink to pwn them all

●

●

● …

■


Issue V - Buy four, get the fifth FREE

●

●

■

●


Firefox Exploit repository

https://github.com/0xroot/FirefoxExploit

https://github.com/0xroot/FirefoxExploit

Engineering