[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Adobe Flash - Use-After-Free When Rendering Displays From Multiple Scripts (2)

Author
Google Security Research
Risk
[
Security Risk Medium
]
0day-ID
0day-ID-25995
Category
dos / poc
Date add
06-05-2016
CVE
CVE-2016-1013
Platform
windows
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=719
 
There is a use-after-free that appears to be related to rendering the display based on multiple scripts. A PoC is attached, tested on Windows only. Note the PoC is somewhat unreliable on some browsers, sometimes it needs to render a minute or two in the foreground before crashing. This is related to unreliability in the freed object being reallocated as a value that causes the crash, not unreliability in the underlying bug (it crashes immediately in a debug build of Flash). With enough effort, an attacker could likely trigger the issue immediately.
 
 
Proof of Concept:
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/39778.zip

#  0day.today [2024-12-24]  #