Adobe Flash – AVC Processing Out-of-Bounds Read

• Exploit Database
• 102 阅读

• 作者： Google Security Research
  日期： 2018-08-27
• 类别：

  • dos
  平台：

  • linux
• 来源：https://www.exploit-db.com/exploits/45268/
• 1 2 3 4 5 6 7 8 9 10

  The attached fuzz file causes an out-of-bounds read in AVC processing. To reproduce the issue, put both attached files on a server, and vist:   <div style="width: 640px;" class="wp-video"><video class="wp-video-shortcode" id="video-76182-2" preload="metadata" controls="controls"><source type="video/mp4" src="http://127.0.0.1/LoadMP4.swf?file=transpose.mp4&_=2" /><a href="http://127.0.0.1/LoadMP4.swf?file=transpose.mp4">http://127.0.0.1/LoadMP4.swf?file=transpose.mp4</a></video></div>   This issue reproduces on Chrome and Firefox for Linux.     Proof of Concept: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/45268.zip