Within Chrome’s V8 engine, this was an interesting double free vulnerability I uncovered. Thank you V8 team for accepting. https://code.google.com/p/chromium/issues/detail?id=270320&thanks=270320&ts=1376009332
Chrome V8
Chrome's V8 double free vulnerability
Within Chrome's V8 engine, this was an interesting double free vulnerability I uncovered. Thank you V8 team for accepting.
Key takeaways
- Double-free bugs in JIT compilers provide attackers with the building blocks for arbitrary code execution.
- Browser sandboxes are the only layer standing between a JavaScript memory bug and system compromise.
- Complex memory allocators require rigorous fuzzing and automated sanitizers.
About the author
Explore cutting-edge cybersecurity insights and protective strategies with John Menerick. Deep dives, threat analysis, and live streams from securesql.info.
