发表机构
Tianjin University; Nanyang Technological University; Singapore Management University; Qi An Xin Group Corp（天津大学; 南洋理工大学; 新加坡管理大学; 奇安信集团）
机构由 AI 辅助整理，请以论文原文为准。AI 中文总结
本文通过对2017-2024年4款主流JavaScript引擎的241个漏洞开展实证研究，建立漏洞分类体系，分析其可利用性与缓解策略，为相关方提供提升引擎安全性的见解。
AI 中文摘要
JavaScript引擎是现代网页浏览器的核心组件，负责执行动态交互式网页应用。然而其复杂性与广泛应用使其成为攻击者利用漏洞的主要目标。现有研究多聚焦于JavaScript引擎漏洞的检测，却在系统理解这类漏洞的特征（包括症状、根本原因及可利用性）方面存在显著空白。本文填补该空白，开展首个针对JavaScript引擎漏洞的综合实证研究，探究其特征与潜在利用策略。我们构建了2017至2024年间4款主流JavaScript引擎的241个漏洞数据集，通过深度分析，首先建立了漏洞症状与根本原因的分类体系；在此基础上，研究这些漏洞的可利用性，明确关键前提条件，提取漏洞触发链以展示逻辑错误如何传播为内存安全违规；此外，分析了应对这些漏洞的缓解策略；最后，总结了对开发者、研究者等各方的关键启示，提供可操作的见解以提升JavaScript引擎的安全性与韧性。
英文摘要
JavaScript engines are pivotal to modern web browsers, enabling the execution of dynamic and interactive web applications. However, their complexity and widespread adoption make them prime targets for attackers exploiting vulnerabilities. While existing research has focused on detecting vulnerabilities of JavaScript engines, a significant gap remains in systematically understanding the characteristics of these vulnerabilities, including their symptoms, root causes, and exploitability. This paper bridges this gap by presenting the first comprehensive empirical study on vulnerabilities in JavaScript engines, investigating their characteristics and potential exploitation strategies. We construct a dataset comprising 241 vulnerabilities across four mainstream JavaScript engines from 2017 to 2024. Through in-depth analysis, we first develop taxonomies for symptoms and root causes. Building on this understanding, we investigate the exploitability of these vulnerabilities, identifying key prerequisites and extracting vulnerability trigger chains that demonstrate how logical errors propagate into memory safety violations. Additionally, we analyze the mitigation strategies to counter these exploits. Finally, we summarize key implications for various stakeholders, including developers and researchers, offering actionable insights to improve the security and resilience of JavaScript engines.
Comments10 pages
