cve/2020/CVE-2020-6507.md

CVE-2020-6507

Description

Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

POC

Reference

• http://packetstormsecurity.com/files/162088/Google-Chrome-81.0.4044-V8-Remote-Code-Execution.html
• http://packetstormsecurity.com/files/162088/Google-Chrome-81.0.4044-V8-Remote-Code-Execution.html
• http://packetstormsecurity.com/files/162105/Google-Chrome-81.0.4044-V8-Remote-Code-Execution.html
• http://packetstormsecurity.com/files/162105/Google-Chrome-81.0.4044-V8-Remote-Code-Execution.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/anvbis/chrome_v8_ndays
• https://github.com/brandonshiyay/learn-v8
• https://github.com/joydo/CVE-Writeups
• https://github.com/maldev866/ChExp_CVE_2020_6507
• https://github.com/oneoy/exploits1
• https://github.com/r4j0x00/exploits