The Great DOM Fuzz-off of 2017
Summary: Project Zero's Ivan Fratric built a generative DOM fuzzer called Domato, gave each of five major browsers roughly 100,000,000 iterations, and found 31 security bugs in currently shipping versions. Apple Safari's WebKit accounted for 17 of them, against 2 in Chrome's Blink, 4 in Firefox's Gecko, 4 in Internet Explorer's Trident, and 6 in Edge's EdgeHtml.
What's compelling: Safari was a clear outlier at 17 bugs, and Fratric ties that to attackers' interest in the platform as evidenced by exploit prices and recent targeted attacks. The same run cost about $1k on preemptable Google Compute Engine VMs, which he notes is well within the pay range of a determined attacker.
Read the original at Google Project Zero ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2016-9079
- Related
- CVE-2016-9079: Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability Known Exploited Vulnerabilities · Jun 22, 2023Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026