Adobe Flash – Pointer Crash in Button Handling

  • 作者: Google Security Research
    日期: 2015-08-19
  • 类别:
    平台:
  • 来源:https://www.exploit-db.com/exploits/37869/
  • Source: https://code.google.com/p/google-security-research/issues/detail?id=399&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id
    
    The attached sample, signal_sigsegv_7ffff60a1429_9554_f4dc661554237404dfe394d4c6c3e674.swf, crashes in this manner on Linux x64:
    
    => 0x00007f693158481f:	movzbl (%rcx),%r11d
    rcx0x3102ffffecfd	53888954658045
    
    The base sample from which this fuzz case was generated is also attached. We believe this may be related to button handling.
    
    Proof of Concept:
    https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/37869.zip