CVE-2017-5375

This exploit leverages CVE-2017-5375 (ASM.JS JIT-spray) and CVE-2016-2819 (Firefox memory corruption) to achieve arbitrary code execution by spraying fake Node objects and ASM.JS float constant pools to bypass ASLR/DEP, ultimately executing calc.exe.

This exploit leverages CVE-2017-5375 (and CVE-2016-1960) to bypass ASLR and DEP in Firefox 44.0.2 using an ASM.JS JIT spray technique. It manipulates Node objects and triggers a vulnerability to achieve arbitrary code execution, demonstrated by launching calc.exe.

This exploit leverages CVE-2017-5375 to bypass ASLR and DEP in Firefox 50.0.1 using an asm.js JIT spray technique, ultimately executing a shellcode payload that spawns cmd.exe.