Full title: Firefox PDF.js Privileged Javascript Injection Exploit Category: remote exploits Platform: windows This Metasploit module gains remote code execution on Firefox 35-36 by abusing a privilege escalation bug in resource:// URIs. PDF.js is used to exploit the bug. This exploit requires the user to click anywhere on the page to trigger the vulnerability. # 0day.today @ http://0day.today/