Adobe Flash – H264 Parsing Out-of-Bounds Read

  • 作者: Google Security Research
    日期: 2016-02-17
  • 类别:
    平台:
  • 来源:https://www.exploit-db.com/exploits/39464/
  • Source: https://code.google.com/p/google-security-research/issues/detail?id=632
    
    There is an out-of-bounds read in H264 parsing, a fuzzed file is attached. To load, load LoadMP4.swf with the URL parameter file=compute_poc.flv from a remote server.
    
    
    Proof of Concept:
    https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/39464.zip