CVE-2020-16012-PoC

CVE-2020-16012 | 侧信道攻击 该仓库包含针对 CVE-2020-16012 的概念验证（PoCs）代码。CVE-2020-16012 是 Firefox 和 Chromium 中 CanvasRenderingContext2D.drawImage 实现存在的一个侧信道漏洞。 本项目由我们硕士二年级（M2）的六名学生团队协作完成。 客户端 Chrome 版本 83 安装链接 https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Linuxx64/75606...

Webkit WebCore::GraphicsContext use-after-free vulnerability

Summary A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. A victim must be tricked into visiting a malicious web page to trigger...

Remote Code Execution (RCE)

firefox is vulnerable to remote code execution RCE attacks. The vulnerability exists as a use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging...

CVE-2015-4497

Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets CSS toke...

CVE-2015-4497

Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets CSS toke...

CVE-2015-4497

CVE-2015-4497 affects Mozilla Firefox (and Iceweasel) prior to Firefox 40.0.3 and Firefox ESR prior to 38.2.1, due to a use-after-free in CanvasRenderingContext2D when a canvas is resized during restyling. This can allow a remote attacker to execute arbitrary code. Remediation: upgrade to Firefox...

CVE-2015-4497

Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets CSS toke...