Lucene search

K
zdiDamian PutZDI-10-111
HistoryJun 21, 2010 - 12:00 a.m.

Adobe Flash Player LocalConnection Memory Corruption Remote Code Execution Vulnerability

2010-06-2100:00:00
Damian Put
www.zerodayinitiative.com
21

0.013 Low

EPSS

Percentile

86.0%

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the connect method exposed via the ActionScript native object number 2200. If this function is called several times with differing strings, a memory corruption issue can be triggered. This can be exploited by remote attackers to execute arbitrary code under the context of the user running the web browser.