Lucene search
Google Security Research1337DAY-ID-25891HistoryMar 23, 2016 - 12:00 a.m.
Adobe Flash - Zlib Codec Heap Overflow
2016-03-2300:00:00
Google Security Research
0day.today
21
EPSS
0.907
Percentile
98.8%
Exploit for windows platform in category dos / poc
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=720
There is a heap overflow in the Zlib codecs used when playing flv files in flash. Sample flv files are attached. Load http://127.0.0.1/LoadMP42.swf?file=smalloverflow.flv to reproduce.
Proof of Concept:
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/39609.zip
# 0day.today [2018-04-02] #Related
exploitdb
exploitdb
Adobe Flash - Zlib Codec Heap Overflow
2016-03-23 00:00:00
ubuntucve
ubuntucve
CVE-2016-1001
2016-03-12 00:00:00
cvelist
cvelist
CVE-2016-1001
2016-03-12 15:00:00
cve
cve
CVE-2016-1001
2016-03-12 15:59:21
prion
prion
Heap overflow
2016-03-12 15:59:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Heap Buffer Overflow (APSB16-08: CVE-2016-1001)
2016-03-06 00:00:00
nvd
nvd
CVE-2016-1001
2016-03-12 15:59:21
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0109)
2016-03-14 00:00:00
Adobe Air Security Update (APSB16-08) - Mac OS X
2016-03-11 00:00:00
mageia
mageia
Updated flash-player-plugin packages fix security vulnerability
2016-03-11 02:37:43
kaspersky
kaspersky
KLA10774 Obsolete Adobe Flash Player for Windows
2016-03-10 00:00:00
KLA10772 Multiple vulnerabilities in Adobe Flash Player & AIR
2016-03-10 00:00:00
nessus
nessus
openSUSE Security Update : Adobe Flash Player (openSUSE-2016-335)
2016-03-14 00:00:00
Adobe AIR < 21.0.0.176 Multiple Vulnerabilities (APSB16-08)
2016-03-30 00:00:00
MS16-036: Security Update for Adobe Flash Player (3144756)
2016-03-11 00:00:00
suse
suse
Security update for flash-player (important)
2016-03-11 13:12:25
Security update for flash-player (important)
2016-03-11 13:12:50
Security update for Adobe Flash Player (important)
2016-03-11 14:14:01
archlinux
archlinux
flashplugin: arbitrary code execution
2016-03-11 00:00:00
lib32-flashplugin: arbitrary code execution
2016-03-11 00:00:00
freebsd
freebsd
flash -- multiple vulnerabilities
2016-03-10 00:00:00
altlinux
altlinux
redhat
redhat
(RHSA-2016:0438) Critical: flash-plugin security update
2016-03-11 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2016-03-12 00:00:00