CVE-2017-8731

Related Files

Microsoft Edge Partial Page Loading Memory Corruption

Posted Sep 19, 2017

Authored by Ivan Fratric, Google Security Research

There is a security issue in Microsoft Edge related to how HTML documents are loaded. If Edge displays a HTML document from a slow HTTP server, it is possible that a part of the document is going to be rendered before the server has finished sending the document. It is also possible that some JavaScript code is going to trigger. By making DOM modifications before the document had a chance of fully loading, followed by another set of DOM modifications after the page has been loaded, it is possible to trigger memory corruption that could possibly lead to an exploitable condition.

tags | exploit, web, javascript

advisories | CVE-2017-8731

SHA-256 | 5907d1f5e11d78ce0680fb433a3f355dee6f8223e8d01f9b8f025438c5f23e93

Download | Favorite | View