627 - Adobe Flash: Out-of-bounds memset in BlurFilter Processing - project-zero

Starred by 1 user

Status:	Fixed
Owner:	natashenka@google.com
Closed:	Jan 2016
Cc:	project-...@google.com
Reported-2014-Nov-12 Finder-natashenka CVE-2015-8636 Deadline-90 Finder-hawkes CCProjectZeroMembers Product-Flash Severity-High Vendor-Adobe Finder-mjurczyk

Adobe Flash: Out-of-bounds memset in BlurFilter Processing

Project Member Reported by natashenka@google.com, Nov 12 2015

Back to list

The attached swf file causes an out-of-bounds memset in BlurFilter processing. Note that Chrome aborts when processing the swf

This bug is subject to a 90 day disclosure deadline. If 90 days elapse
without a broadly available patch, then the bug report will automatically
become visible to the public.

blurfilter.swf
56.5 KB Download

Project Member Comment 1 by natashenka@google.com, Nov 12 2015

The crash occurs on Firefox though.

Project Member Comment 2 by natashenka@google.com, Jan 8 2016

Labels: -Restrict-View-Commit CVE-2015-8636
Status: Fixed

This is PSIRT-4291 and CVE-2015-8636

► Sign in to add a comment