ASLR Vulnerability Exploitable via JavaScript
wired.com