Exploit Adobe Flash (Multiple Scripts) - Use-After-Free When Rendering Displays (1)

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
39220
Проверка EDB
  1. Пройдено
Автор
GOOGLE SECURITY RESEARCH
Тип уязвимости
DOS
Платформа
WINDOWS
CVE
cve-2015-8635
Дата публикации
2016-01-11
Adobe Flash (Multiple Scripts) - Use-After-Free When Rendering Displays (1)
Код:
Source: https://code.google.com/p/google-security-research/issues/detail?id=628

There is a use-after-free that appears to be related to rendering the display based on multiple scripts. A PoC is attached, tested on Windows only. Note the PoC is somewhat unreliable on some browsers, sometimes it needs to render a minute or two in the foreground before crashing. This is related to unreliability in the freed object being reallocated as a value that causes the crash, not unreliability in the underlying bug (it crashes immediately in a debug build of Flash). With enough effort, an attacker could likely trigger the issue immediately.


Proof of Concept:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/39220.zip
 
Источник
www.exploit-db.com

Похожие темы