Project Zero: Attacking ECMAScript Engines with Redefinition

http://googleprojectzero.blogspot.com/2015/08/attacking-ecmascript-engines-with.html