CVE-2019-9810

This exploit leverages a type confusion vulnerability in SpiderMonkey (Firefox's JavaScript engine) to achieve arbitrary read/write primitives, leading to potential remote code execution. It manipulates array lengths and corrupts memory to bypass security checks.

This exploit leverages a type confusion vulnerability in JavaScript engines (CVE-2019-9810) by manipulating array lengths and species properties to achieve arbitrary memory read/write. It uses JIT compilation and garbage collection to trigger the vulnerability.

This repository contains a functional exploit for CVE-2019-9810, a bounds-check bypass vulnerability in Firefox's IonMonkey JIT compiler. The exploit achieves remote code execution by leveraging memory corruption to inject and execute a reflective DLL payload.

This repository contains a README describing CVE-2019-9810, a vulnerability in Firefox related to incorrect alias information in Array.prototype.slice. The issue was fixed in Firefox 66.0.1.

This repository contains a full exploit chain for CVE-2019-11708 and CVE-2019-9810, targeting Firefox on Windows 64-bit. It leverages a data corruption vulnerability (CVE-2019-9810) to achieve privileged JavaScript execution and then exploits CVE-2019-11708 to compromise the parent process.