Re:Four RCE Zero-Day Flaws Plague Internet Explorer
by sago on Thursday July 23, 2015 @01:30PM
(#9937221)
Thank you, exactly what I needed to understand.
Re:Four RCE Zero-Day Flaws Plague Internet Explorer
by ssclafani on Thursday July 23, 2015 @02:20PM
(#9937511)
Google's Project Zero team has written some good blog posts on this topic if you want to read more:
http://googleprojectzero.blogspot.com/2015/06/what-is-good-m...
http://googleprojectzero.blogspot.com/2015/06/dude-wheres-my...
Because so many browser fuzzing crashes are UAFs, people have put a lot of effort into developing reliable techniques for exploiting them.
See e.g: http://www.rapid7.com/db/modules/exploit/windows/browser/ms1... for a reasonably reliable example.