CVE-2018-17463 PoC — Google Chrome V8 输入验证错误漏洞

Source

https://github.com/kdmarti2/CVE-2018-17463

Associated Vulnerability

Title:Google Chrome V8 输入验证错误漏洞 (CVE-2018-17463)
Description:Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Description

Completed a working exploit for CVE-2018-17463 for fun.

Readme

# CVE-2018-17463
Completed a working exploit for CVE-2018-17463 for fun.

The original writeup that I found on this bug was here http://phrack.org/papers/jit_exploitation.html. I just really wanted to change this arb r/w into a fully working exploit.

Also I learned the JIT spray technique from the following paper which is an interesting read.
```
@inproceedings{gawlik2018sok,
  title={Sok: Make jit-spray great again},
  author={Gawlik, Robert and Holz, Thorsten},
  booktitle={12th $\{$USENIX$\}$ Workshop on Offensive Technologies ($\{$WOOT$\}$ 18)},
  year={2018}
}
```
url: https://www.usenix.org/system/files/conference/woot18/woot18-paper-gawlik.pdf

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!