Chakra JIT CFG Bypass
theori.io | research | #jit | #exploit | #internet-explorer | #chakra | #cfg-bypass | #edge | #ms16-119
Summary
Bypassing Windows' Control Flow Guard in IE and Edge by abusing Chakra JIT: trigger compilation, locate the native code buffer, modify and run — a technique later fixed in MS16-119.
- Published
- Collected
--- id: 4682 title: "Chakra JIT CFG Bypass" source_domain: theori.io source_url: "https://theori.io/blog/chakra-jit-cfg-bypass" published_at: "2016-12-13T15:00:00Z" tags: ["jit", "exploit", "internet-explorer", "chakra", "cfg-bypass", "edge", "ms16-119"] phying_url: "https://phying.com/item/4682" lang: en --- # Chakra JIT CFG Bypass ## Summary Bypassing Windows' Control Flow Guard in IE and Edge by abusing Chakra JIT: trigger compilation, locate the native code buffer, modify and run — a technique later fixed in MS16-119. ## Intelligence Metadata - **Sources:** theori.io - **Published:** 2016-12-13T15:00:00Z - **Original:** https://theori.io/blog/chakra-jit-cfg-bypass - **Phying News:** https://phying.com/item/4682