#Firefox adobe plugin vulnerable pdf#

Mac users are not targeted by this particular exploit but would not be immune should someone create a different payload. ssh configuration files and keys, configuration files for remina, Filezilla, and Psi+, text files with вЂњpassвЂќ and вЂњaccessвЂќ in the names, and any shell scripts. On Linux the exploit goes after the usual global configuration files like /etc/passwd, and then in all the user directories it can access it looks for. purple and Psi+ account information, and site configuration files from eight different popular FTP clients. On Windows the exploit looked for subversion, s3browser, and Filezilla configurations files. The files it was looking for were surprisingly developer focused for an exploit launched on a general audience news site, though of course we donвЂ™t know where else the malicious ad might have been deployed. This allowed it to search for and upload potentially sensitive local files. The vulnerability does not enable the execution of arbitrary code but the exploit was able to inject a JavaScript payload into the local file context.

#Firefox adobe plugin vulnerable pdf#

Mozilla products that donвЂ™t contain the PDF Viewer, such as Firefox for Android, are not vulnerable. The vulnerability comes from the interaction of the mechanism that enforces JavaScript context separation (the вЂњsame origin policyвЂќ) and FirefoxвЂ™s PDF Viewer. The fix has also been shipped in Firefox ESR 38.1.1. All Firefox users are urged to update to Firefox 39.0.3.

This morning Mozilla released security updates that fix the vulnerability. Yesterday morning, August 5, a Firefox user informed us that an advertisement on a news site in Russia was serving a Firefox exploit that searched for sensitive files and uploaded them to a server that appears to be in Ukraine.