0

I'm compiling vulnerabilities and related attacks, and I need to find a famous attack that exploited a use-after-free vulnerability. I've looked for a while though I can't seem to find any. I know there are lots of times use-after-frees were found in internet explorer and other softwares, though I only get pointed to the vulnerability and update pages, and not specific attacks.

  • Google-Fu it up: purehacking.com/blog/lloyd-simon/… – thepip3r Oct 29 '18 at 19:44
  • So, you are looking for a high profile attack that used an exploit for this specific vulnerability? Are you looking for PoCs (there are lots)? Are you looking for CVEs? – schroeder Oct 29 '18 at 23:07
2

How we broke PHP, hacked Pornhub and earned $20,000

We have found two use-after-free vulnerabilities in PHP’s garbage collection algorithm. Those vulnerabilities were remotely exploitable over PHP’s unserialize function.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.