1320 - Adobe Flash: Invoke Accesses Trait Out-of-bounds - project-zero

Starred by 2 users

Status:	Fixed
Owner:	natashenka@google.com
Closed:	Aug 16
Cc:	project-...@google.com
Finder-natashenka Deadline-90 CCProjectZeroMembers Product-Flash Severity-High Vendor-Adobe Finder-mjurczyk Reported-2017-Jul-5 Methodology-Fuzzing CVE-2017-3106

Adobe Flash: Invoke Accesses Trait Out-of-bounds

Project Member Reported by natashenka@google.com, Jul 5

Back to list

The attached fuzzed swf file causes the traits of an ActionScript object to be accessed out of bounds. This can probably lead to exploitable type confusion. 

This bug is subject to a 90 day disclosure deadline. After 90 days elapse
or a patch has been made broadly available, the bug report will become
visible to the public.

98.swf
855 KB Download

Project Member Comment 1 by natashenka@google.com, Aug 16

Labels: -Restrict-View-Commit CVE-2017-3106
Status: Fixed

► Sign in to add a comment