Engineering Heap Overflow Exploits with JavaScript. - Mark Daniel; Jake Honoroff; Charlie Miller (WOOT, 2008)