Microsoft Edge CssParser::RecordProperty Type Confusion Exploit

Exploit for windows platform in category dos / poc Microsoft Edge: Type confusion in CssParser::RecordProperty CVE-2017-8496 There is a type confusion vulnerability in Microsoft Edge. The vulnerability has been confirmed on Windows 10 Enterprise 64-bit OS version 1607, OS build 14393.1198 and...

Microsoft Edge CssParser::RecordProperty Type Confusion

Microsoft Edge: Type confusion in CssParser::RecordProperty CVE-2017-8496 There is a type confusion vulnerability in Microsoft Edge. The vulnerability has been confirmed on Windows 10 Enterprise 64-bit OS version 1607, OS build 14393.1198 and Microsoft Edge 38.14393.1066.0, Microsoft EdgeHTML...

Microsoft Edge - 'CssParser::RecordProperty' Type Confusion

function go window.addEventListener"DOMAttrModified", undefined; m.style.cssText = "clip-path: urlfoo;"; !-- ========================================= Preliminary analysis: The crash happens inside CAttrArray::PrivateFindInl. Rcx this pointer is supposed to point to a CAttrArray but it actually...