1335845 - (CVE-2022-34483) Image Drag and Drop Remote Code Execution

Status: RESOLVED FIXED

(Core :: DOM: Copy & Paste and Drag & Drop, defect)

Description

[Daniel Veditz [:dveditz]]

iDefense VCP Submission V-92zvysquci
02/01/2017
Mozilla Firefox Image Drag and Drop Remote Code Execution Vulnerability (iDefense Zero Day)

Description: 
Remote exploitation of a design error vulnerability in the Mozilla Foundation's Firefox could allow an attacker to execute arbitrary code on the targeted host. 

*** A design error vulnerability exists in Firefox. Mozilla Firefox allows the creation of unsafe files on a host when performing drag and drop operations on images embedded in a webpage.

Analysis: 
Exploitation of this vulnerability allows the attacker to execute arbitrary code on the target. Exploitation requires that attackers social engineer victims into viewing a malicious Web page. To exploit this issue, an attacker must convince an user into performing a drag and drop operation on an image with a specially crafted file name with two extensions to the local file system. Firefox truncates characters from the final filename when the image's file name is longer than 128 characters. This could lead to arbitrary code execution when the user opens the created file.
iDefense considers this vulnerability to be of MEDIUM severity due to the need for social engineering and user interaction.

Credit: 
Eduardo Braun Prado

Comment 1

[Neil Deakin]

This should have been fixed at least by 1746052.

Comment 2

[Tom Ritter [:tjr] (OOTO until mid-August)]

Attachment: advisory.txt

Comment 3

[Tom Ritter [:tjr] (OOTO until mid-August)]

Attachment: advisory.txt

Comment 4

[Tom Ritter [:tjr] (OOTO until mid-August)]

Attachment: advisory.txt