はてなブックマーク - CVE-2024-4367 - Arbitrary JavaScript execution in PDF.js - Codean Labs https://b.hatena.ne.jp/entry/s/codeanlabs.com/2024/05/cve-2024-4367-arbitrary-js-execution-in-pdf-js/ This post details CVE-2024-4367, a vulnerability in PDF.js found by Codean Labs. PDF.js is a JavaScript-based PDF viewer maintained by Mozilla. This bug allows an attacker to execute arbitrary Java... emonkak https://b.hatena.ne.jp/emonkak/20240526#bookmark-4753744524911835904 2024-05-26T04:59:57Z pdf javascript security yug1224 https://b.hatena.ne.jp/yug1224/20240523#bookmark-4753744524911835904 2024-05-22T17:27:11Z raimon49 https://b.hatena.ne.jp/raimon49/20240522#bookmark-4753744524911835904 2024-05-22T06:30:26Z CodeReading JavaScript PDF Security programming challysen198 https://b.hatena.ne.jp/challysen198/20240522#bookmark-4753744524911835904 2024-05-21T16:23:46Z xef https://b.hatena.ne.jp/xef/20240521#bookmark-4753744524911835904 2024-05-21T13:19:46Z Security PDF demandosigno https://b.hatena.ne.jp/demandosigno/20240521#bookmark-4753744524911835904 2024-05-21T03:25:10Z dev_tamura https://b.hatena.ne.jp/dev_tamura/20240521#bookmark-4753744524911835904 2024-05-21T01:41:22Z mota2 https://b.hatena.ne.jp/mota2/20240521#bookmark-4753744524911835904 2024-05-21T01:20:22Z security hillbert https://b.hatena.ne.jp/hillbert/20240521#bookmark-4753744524911835904 2024-05-21T00:53:03Z あとで読む efcl https://b.hatena.ne.jp/efcl/20240521#bookmark-4753744524911835904 細工したPDFファイルをPDF.jsで表示すると任意のJavaScriptが実行できるXSS脆弱性について。 PDF.js v4.2.67で修正されている。また`isEvalSupported: false`にすることでも回避できる。 2024-05-21T00:36:18Z PDF JavaScript security Electron article winterfall https://b.hatena.ne.jp/winterfall/20240521#bookmark-4753744524911835904 2024-05-21T00:34:51Z mstk_knife https://b.hatena.ne.jp/mstk_knife/20240521#bookmark-4753744524911835904 2024-05-21T00:08:04Z あとで読む yagipass https://b.hatena.ne.jp/yagipass/20240521#bookmark-4753744524911835904 2024-05-21T00:04:51Z pdf CVE security minamijoyo https://b.hatena.ne.jp/minamijoyo/20240521#bookmark-4753744524911835904 2024-05-20T23:57:01Z mrtc0 https://b.hatena.ne.jp/mrtc0/20240521#bookmark-4753744524911835904 2024-05-20T23:46:52Z agano https://b.hatena.ne.jp/agano/20240521#bookmark-4753744524911835904 2024-05-20T22:00:35Z prozorec https://b.hatena.ne.jp/prozorec/20240521#bookmark-4753744524911835904 ESRは115.11で修正 https://www.mozilla.org/en-US/security/advisories/mfsa2024-22/ 2024-05-20T21:52:23Z firefox delegate https://b.hatena.ne.jp/delegate/20240521#bookmark-4753744524911835904 2024-05-20T20:31:59Z javascript pdf セキュリティ あとで読む atamachang https://b.hatena.ne.jp/atamachang/20240521#bookmark-4753744524911835904 2024-05-20T17:56:59Z somathor https://b.hatena.ne.jp/somathor/20240521#bookmark-4753744524911835904 2024-05-20T16:52:30Z javascript pdf vulnerability security buzztaiki https://b.hatena.ne.jp/buzztaiki/20240521#bookmark-4753744524911835904 2024-05-20T16:46:31Z kmkzt https://b.hatena.ne.jp/kmkzt/20240521#bookmark-4753744524911835904 2024-05-20T16:25:09Z Wacky https://b.hatena.ne.jp/Wacky/20240520#bookmark-4753744524911835904 2024-05-20T14:27:49Z daikikohara https://b.hatena.ne.jp/daikikohara/20240520#bookmark-4753744524911835904 2024-05-20T13:16:28Z javascript vulnerability pdf