{"id":249393,"date":"2018-02-20T09:55:39","date_gmt":"2018-02-20T07:55:39","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=249393"},"modified":"2018-02-20T09:56:41","modified_gmt":"2018-02-20T07:56:41","slug":"google-discloses-vulnerability-in-microsoft-edge","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/internet\/249393-google-discloses-vulnerability-in-microsoft-edge.html","title":{"rendered":"Google discloses vulnerability in Microsoft Edge"},"content":{"rendered":"

Google has disclosed a security flaw affecting the Edge browser’s JavaScript just-in-time (JIT) compiler, The Verge reported<\/a><\/strong>.<\/p>\n

The issue stems from a change Microsoft unveiled when it moved just-in-time compiling<\/a><\/strong> from its Chakra JavaScript engine to a separate process.<\/p>\n

It made the change to improve the security of the browser and defend against arbitrary code execution exploits that might emerge out of compiling JavaScript to a machine’s native code.<\/p>\n

In its disclosure of the security flaw, Google said<\/a><\/strong>\u00a0it is possible for an attacker to predict where the JIT process is going to call a function used to allocate individual pages before they are written to.<\/p>\n

The function is named\u00a0VirtualAllocEx().<\/p>\n

Once the attacker predicts on which address VirtualAlloxEx() is going to be called next, they can:<\/p>\n

    \n
  1. Unmap the shared memory mapped above using UnmapViewOfFile().<\/li>\n
  2. Allocate a writable memory region on the same address JIT server is going to write, and write a soon-to-be-executable payload there.<\/li>\n
  3. When the JIT process calls VirtualAllocEx(), even though the memory is already allocated, the call is going to succeed and the memory protection is going to be set to PAGE_EXECUTE_READ.<\/li>\n<\/ol>\n

    Grace period<\/h3>\n

    Google originally gave Microsoft 90 days to fix the issue, but Microsoft’s Security Research Centre said the issue is more complex than first thought.<\/p>\n

    Google did not extend its 14-day grace period after the 90-day deadline.<\/p>\n

    Now read:\u00a0Microsoft Edge now available on Android and iOS<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"

    Google has disclosed a security flaw affecting the Edge browser.<\/p>\n","protected":false},"author":23,"featured_media":125356,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[18],"tags":[167,30102],"class_list":["post-249393","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-internet","tag-google","tag-microsoft-edge"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/249393"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=249393"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/249393\/revisions"}],"predecessor-version":[{"id":249401,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/249393\/revisions\/249401"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/125356"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=249393"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=249393"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=249393"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}