Exploitation Summary
EIP tracks 1 public exploit for CVE-2018-6064. PoCs published by Google Security Research.
AI-analyzed exploit summary This PoC exploits a type confusion vulnerability in V8's elements handling, where a getter can alter the array's elements kind during iteration, leading to memory corruption. The exploit triggers the issue via `Object.entries` on a maliciously crafted array.
Description
Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Exploits (1)
This PoC exploits a type confusion vulnerability in V8's elements handling, where a getter can alter the array's elements kind during iteration, leading to memory corruption. The exploit triggers the issue via `Object.entries` on a maliciously crafted array.
References (7)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H