CVE-2019-5825 PoC — Google Chrome V8 缓冲区错误漏洞

Source

https://github.com/timwr/CVE-2019-5825

Associated Vulnerability

Title:Google Chrome V8 缓冲区错误漏洞 (CVE-2019-5825)
Description:Google Chrome是美国谷歌（Google）公司的一款Web浏览器。 Google Chrome 73.0.3683.86之前版本中的JavaScript存在缓冲区错误漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。

Readme


Chrome exploit for 73.0.3683.86 (--no-sandbox)
V8 version 6.9.0

https://github.com/exodusintel/Chromium-941743
https://lordofpwn.kr/cve-2019-5825-v8-exploit/
https://github.com/rapid7/metasploit-framework/pull/12574/files

File Snapshot


 [4.0K]  /data/pocs/9bac1bcd3783682472061840a06764055bc6835e
├── [6.9K]  exodus.js
├── [1.9K]  exploit.js
├── [ 268]  exploit.sh
├── [2.9K]  nextline.js
└── [ 225]  README.md

0 directories, 5 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!