CVE-2015-2482

Related Files

Microsoft Internet Explorer 8 Javascript RegExpBase::FBadHeader Use-After-Free

Posted Nov 16, 2016

Authored by SkyLined

A specially crafted web-page can cause the Javascript engine of Microsoft Internet Explorer 8 to free memory used for a string. The code will keep a reference to the string and can be forced to reuse it when compiling a regular expression.

tags | exploit, web, javascript

advisories | CVE-2015-2482

SHA-256 | a44bc80d38c01b629bf33d47219ad52a17a287e1ebeaf43f0e48e32b2c5d2caf

Download | Favorite | View

JScript 5.7 RegExpBase::FBadHeader Use-After-Free

Posted Oct 14, 2015

Authored by SkyLined

Recompiling the regular expression pattern during a replace in JScript version 5.7 (MSIE 8) can cause the code to reuse a freed string, but only if the string is freed from the cache by allocating and freeing a number of strings of certain size.

tags | exploit

advisories | CVE-2015-2482

SHA-256 | de4b362c98096f2627ba422def8ffe6b298c4c26b1bf19a41b77cd41aab24c77

Download | Favorite | View