Collected research

Residue Objects: A Challenge to Web Browser Security

Shuo Chen, Hong Chen and Manuel Caballero · Microsoft Research

Browser objects that outlive the page switch - residue objects - break visual integrity, document integrity and memory safety when the engine's guards miss a case. The authors analyse Internet Explorer's guarding mechanisms and enumerate reachable states, finding five new vulnerabilities in the native HTML engine alone, one of which shipped in a Microsoft security update. EuroSys 2010.

Record

Researcher

Shuo Chen, Hong Chen and Manuel Caballero

Published by

Microsoft Research

Topic

Browser

In the archive

• Collected in the 2010 research round

Tags

• dom
• sandbox-escape
• same-origin-policy
• formal-analysis
• static-analysis
• cve
• measurement-study
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Shuo Chen, Hong Chen and Manuel Caballero, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 11 August 2026.