CVE-2018-18500 PoC — Mozilla Firefox 资源管理错误漏洞

Source

https://github.com/sophoslabs/CVE-2018-18500

Associated Vulnerability

Title:Mozilla Firefox 资源管理错误漏洞 (CVE-2018-18500)
Description:A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.

Description

PoC for CVE-2018-18500 - Firefox Use-After-Free

Readme

# CVE-2018-18500
PoC for CVE-2018-18500 - Firefox Use-After-Free

Write-up: https://news.sophos.com/en-us/2019/04/18/protected-cve-2018-18500-heap-write-after-free-in-firefox-analysis-and-exploitation/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!