Microsoft Edge and Internet Explorer can be exploited by a type confusion in HandleColumnBreakOnColumnSpanningElement. A POC was released here. [1] https://bugs.chromium.org/p/project-zero/issues/detail?id=1011#c2 ----------- |
Guy 486 Posts ISC Handler Feb 25th 2017 |
Thread locked Subscribe |
Feb 25th 2017 3 years ago |
Sign Up for Free or Log In to start participating in the conversation!