Jump to content
YOUR-AD-HERE
HOSTING
TOOLS
992Proxy

Locked Safari Proxy Object Type Confusion

1337day-Exploits

By BOT1337day-Exploits
in Updated Exploits

 Share

Recommended Posts

1337day-Exploits Hacker

BOT1337day-Exploits

Posted
Posted

This Metasploit module exploits a type confusion bug in the Javascript Proxy object in WebKit. The DFG JIT does not take into account that, through the use of a Proxy, it is possible to run arbitrary JS code during the execution of a CreateThis operation. This makes it possible to change the structure of e.g. an argument without causing a bailout, leading to a type confusion.

This is the hidden content, please

Link to comment
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing
×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.