[!IMPORTANT] This repository is for learning about vulnerabilities.
Perform this hands-on only on an appropriate computer that you manage. Never engage in illegal activities.
The author accepts no responsibility or liability for any damage arising from this repository.

CVE-2024-4367-hands-on

A hands-on to experience CVE-2024-4367

Creating poc.pdf

python CVE-2024-4367-PoC/CVE-2024-4367.py "alert('document.domain')"

Source: https://github.com/LOURC0D3/CVE-2024-4367-PoC

An attack poc.pdf will be created.
For detailed usage, please refer to the following:
https://github.com/LOURC0D3/CVE-2024-4367-PoC

Launch a vulnerable Firefox and confirm the attack

python firefox.py 125

Opens poc.pdf using a vulnerable version of Firefox Nightly.
The first launch will take time because Firefox Nightly is downloaded.
Confirm that JavaScript is executed and an alert is displayed.

Verify with a patched Firefox

python firefox.py 135

Open poc.pdf with the new Firefox Nightly version and confirm that no alert is displayed and the vulnerability has been fixed.

Comparing the PDF.js source code

There is vulnerable-pdf.js, which contains the vulnerability, and invulnerable-pdf.js, which has the vulnerability fixed.

pdfjs_diff_font_renderer.js is the diff between vulnerable-pdf.js/src/core/font_renderer.js and invulnerable-pdf.js/src/core/font_renderer.js.