Rating:

Original writeup (http://security.szurek.pl/pwn2win-ctf-2016-facebug-writeup.html).