The document discusses multiple issues and vulnerabilities in the Firefox web browser, including issues with JavaScript, secrets, symlinks, and an exploit repository. It covers constraints and solutions to these technical problems, as well as results and short summaries. The overall topic is an introduction to analyzing vulnerabilities in Firefox through a forensic analysis lab.

1. Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Firefox
-
A tale about chained
vulnerabilities

2. Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Introduction
●
●
●
…

3. Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Issue I - This is not the activity
you were looking for
●
●
■
■
■
●
●

4. Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Issue I - Constraints

5. Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Issue II - Mr. Javascript
Yes, I really like Tarantino’s films
●
■
■
● …
■
■
■

6. Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Temporary Solution

7. Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Results

8. Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Issue II - Constraints

9. Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Issue III - I know your secrets
●
●

10. Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Solution
●

11. Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Solution
● …
●

12. Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
In short
●
■
■
■

13. Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Issue IV - One symlink to pwn
them all
●
■

14. Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Issue IV - One symlink to pwn
them all
●
●
● …
■

15. Copyright © 2013 viaForensics, LLC Training: Intro to viaLab

16. Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Issue V - Buy four, get the fifth
FREE
●
●
■
●

17. Copyright © 2013 viaForensics, LLC Training: Intro to viaLab
Firefox Exploit repository