Lucene search

K
hackeroneHhj4ckH1:119652
HistoryMar 01, 2016 - 7:57 a.m.

Internet Bug Bounty: Adobe Flash Player ASnative(101,10) Memory Corruption Vulnerability

2016-03-0107:57:50
hhj4ck
hackerone.com
20

0.012 Low

EPSS

Percentile

85.2%

I. Summary
Adobe Flash Player is prone to a vulnerability which leads to Memory Corruption.

II. Description
When ASnative(101,10) is called with a MovieClip object pointer, Flash Player is crashed due to an invalid EIP value. Carefully crafted swf file may allow the attacker to hijack the EIP, leading to shellcode execution in the context of affected application.

Lastest version of Adobe Flash Player 20.0.0.267 has been tested under Windows 7.

III. Impact
Memory Corruption

IV. Credit
Wen Guanxing from Venustech ADLAB is credited for this vulnerability.

It has been assigned as CVE-2016-0981 by Adobe.
https://helpx.adobe.com/security/products/flash-player/apsb16-04.html