Issue metadata
Sign in to add a comment
|
Security: [FG-VD-16-077] Adobe Flash Player Handling MP4 Heap Overflow Vulnerability
Reported by
kevinlu0...@gmail.com,
Nov 11 2016
|
||||||||||||||||||||||
Issue descriptionVULNERABILITY DETAILS It is a Heap Overflow vulnerability in MP4 processing. VERSION Adobe Flash Player 23.0.0.207 Other versions may be affected too REPRODUCTION CASE put LoadMP42.swf and FG-VD-16-077_PoC.mp4 on a server and load http://127.0.0.1:8080/LoadMP42.swf?file=FG-VD-16-077_PoC.mp4 run the following command line. flashplayer_23_sa_207.exe http://127.0.0.1:8080/LoadMP42.swf?file=FG-VD-16-077_PoC.mp4 Credits: This vulnerability was discovered by Kai Lu of Fortinet's FortiGuard Labs.
,
Nov 11 2016
,
Nov 18 2016
Any update on triaging this? Thanks.
,
Nov 18 2016
Hi, like the other issues, I can't reproduce these on Chrome, but I've forwarded it to Adobe. It would help for rewards purposes if you could provide a case that crashes on Chrome.
,
Nov 21 2016
,
Nov 29 2016
,
Nov 29 2016
WontFixing for now - please re-open if you have a test case which crashes in Chrome. :)
,
Nov 29 2016
,
Nov 29 2016
Moving to unconfirmed, as I still need to track this until we hear back from Adobe.
,
Nov 29 2016
,
Nov 29 2016
,
Nov 30 2016
Adobe assigned this PSIRT-6030.
,
Dec 6 2016
Kai, is it okay if I give Adobe your email address, so they can ask you questions about this and another bug directly?
,
Dec 6 2016
natashenka, are they repro issues? It's OK, please also add my working email kailu@fortinet.com in the thread, thanks
,
Dec 6 2016
Please also keep you in that email thread to trace updates of these cases. Thanks!
,
Feb 13 2017
This was fixed as CVE-2017-2984.
,
Feb 13 2017
,
Feb 15 2017
,
Feb 16 2017
,
May 25 2017
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by rickyz@chromium.org
, Nov 11 2016Labels: Security_Severity-High
Owner: natashenka@google.com
Status: Assigned (was: Unconfirmed)