CVE-2019-13720 PoC — Google Chrome WebAudio 资源管理错误漏洞

Source

https://github.com/bb33bb/CVE-2019-13720

Associated Vulnerability

Title:Google Chrome WebAudio 资源管理错误漏洞 (CVE-2019-13720)
Description:Google Chrome是美国谷歌（Google）公司的一款Web浏览器。 Google Chrome 78.0.3904.87之前版本中的WebAudio存在资源管理错误漏洞。远程攻击者可借助特制网站利用该漏洞在系统上执行任意代码。

Description

PoC of CVE

Readme

# CVE-2019-13720(a.k.a WizardOpium) PoC and exploit
work chrome version under 78.0.3904.70.  
The original authors(Kaspersky Lab) have full license over all code.  
You can see more information on here:(https://bugs.chromium.org/p/chromium/issues/detail?id=1019226)

full exploit is donwloaded form packetstorm , not my work. just to make it clear.

File Snapshot


 [4.0K]  /data/pocs/1bfed7bbaf7a6cc3f15e2403d4e92ad545e5de8f
├── [ 10K]  cve-2019-13720.html
├── [ 40K]  exp.html
└── [ 349]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!