CVE-2017-2470

creationtimestamp| type| source ---|---|--- 2017-04-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41867...

WebKit JSC::B3::Procedure::resetReachability Use-After-Free

WebKit: Use-after-free in JSC::B3::Procedure::resetReachability CVE-2017-2470 Note: It seems it doesn't crash the JSC compiled without Address Sanitizer. PoC: function for var i = 0; i 1000000; ++i const v = Array & 1 ? v : 1; typeof o = 'object'; ; Asan Log:...

CVE-2017-2470

CVE-2017-2470 affects WebKit components across Apple devices (iOS before 10.3, Safari before 10.1, tvOS before 10.2). The issue enables remote arbitrary code execution or memory corruption via a crafted web site, potentially crashing the application. Root cause involves memory corruption in WebKi...