Team Name: Alex Rad 
email: defend.the.world@gmail.com

VERSION:       0.1 (10916299) 

Vulnerability:

A double free vulnerability exists in the SPRC nacl to browser communications interface.
The bug is triggered when handling malformed arguments. A double free can lead to a loss
of state in the underlying heap allocator. An attack may weaponize it for arbitrary memory
corruption leading to remote code execution. 

To launch the vulnerability a malicious module must be loaded by a target user.
The error is triggered by sending an invalid SRPC response.

Tests were done on Linux using Firefox 3.0.10

srpc_args_df.tar.gz 91.1 KB   Download