JavaScript-Based ASLR Bypass Attack Simplifies Browser Exploits

Researchers have devised a new attack that can bypass one of the main exploit mitigations in browsers: address space layout randomization (ASLR). The attack takes advantage of how modern processors cache memory and, because it doesn’t rely on a software bug, fixing the problem is not easy.

http://www.networkworld.com/article/3170579/security/javascript-based-aslr-bypass-attack-simplifies-browser-exploits.html