# CVE-2017-2446 or JSC::JSGlobalObject::isHavingABadTime.

DevFeed: [CVE-2017-2446 or JSC::JSGlobalObject::isHavingABadTime.](<https://devfeed.tech/articles/cve-2017-2446-or-jsc-jsglobalobject-ishavingabadtime-39706.md>)

Original publisher: [Read original article](<https://doar-e.github.io/blog/2018/07/14/cve-2017-2446-or-jscjsglobalobjectishavingabadtime/>)

Author: yrp

Published: 2018-07-15T01:49:00Z

Content type: tutorial

Language: en

Sources: [Diary of a reverse-engineer](<https://devfeed.tech/sources/diary-of-a-reverse-engineer.md>)

Topics: [Exploit](<https://devfeed.tech/topics/exploit.md>), [WebKit](<https://devfeed.tech/topics/webkit.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [Tooling](<https://devfeed.tech/topics/tooling.md>), [Linux](<https://devfeed.tech/topics/linux.md>)

Tags: [browser](<https://devfeed.tech/tags/browser.md>), [c-plus-plus](<https://devfeed.tech/tags/c-plus-plus.md>), [command-line](<https://devfeed.tech/tags/command-line.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cve-2017-2446](<https://devfeed.tech/tags/cve-2017-2446.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [exploitation](<https://devfeed.tech/tags/exploitation.md>), [javascriptcore](<https://devfeed.tech/tags/javascriptcore.md>), [jsc](<https://devfeed.tech/tags/jsc.md>), [linux](<https://devfeed.tech/tags/linux.md>)

## AI overview

A technical post describes developing an exploit for the JavaScriptCore engine targeting CVE-2017-2446. It covers the author's background, WebKit exploitation resources, vulnerable-version setup, tooling, and a Linux-based JSC target.

## Source excerpt

Introduction This post will cover the development of an exploit for JavaScriptCore (JSC) from the perspective of someone with no background in browser exploitation. Around the start of the year, I was pretty burnt out on CTF problems and was interested in writing an exploit for something more complicated and ...