CVE-2017-2468

creationtimestamp| type| source ---|---|--- 2017-04-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41868...

WebKit Document::adoptNode Use-After-Free

WebKit: Use-After-Free via Document::adoptNode CVE-2017-2468 This is a regression test from: https://crbug.com/541206. But I think it seems not possible to turn it into an UXSS in WebKit. PoC: var s = document.body.appendChilddocument.createElement'script'; s.type = '0'; s.textContent =...

WebKit: Use-After-Free via Document::adoptNode (CVE-2017-2468)

This is a regression test from: https://crbug.com/541206. But I think it seems not possible to turn it into an UXSS in WebKit. PoC: var s = document.body.appendChilddocument.createElement'script'; s.type = '0'; s.textContent = 'document.body.appendChildparent.i0'; var i0 =...

CVE-2017-2468

CVE-2017-2468 affects WebKit on iOS (before 10.3), Safari (before 10.1), and tvOS (before 10.2). It permits remote attackers to execute arbitrary code or cause memory corruption and application crashes via a crafted web site. Root cause: memory corruption in WebKit components leading to code exec...