Lucene search

K
hackeroneHhj4ckH1:145269
HistoryJun 17, 2016 - 1:00 a.m.

Internet Bug Bounty: Adobe Flash Player ShimOpportunityGenerator class Memory Corruption Vulnerability

2016-06-1701:00:44
hhj4ck
hackerone.com
27

EPSS

0.01

Percentile

83.3%

I. Summary
Adobe Flash Player is prone to a vulnerability which leads to memory corruption because of improper validation of ShimOpportunityGenerator.configure().

II. Description
Normally, configure() should validates its parameter and returns error in AS3 level if anything goes wrong.
If configure() function is invoked directly with invalid parameter, some inner class instance will be absent, which will cause a memory crash.

III. Credit
Wen Guanxing from Pangu LAB is credited for this vulnerability.

It has been assigned by Adobe as CVE-2016-4153.
https://helpx.adobe.com/security/products/flash-player/apsb16-18.html