Lucene search

K
exploitdbGoogle Security ResearchEDB-ID:39779
HistoryMay 06, 2016 - 12:00 a.m.

Adobe Flash - MovieClip.duplicateMovieClip Use-After-Free

2016-05-0600:00:00
Google Security Research
www.exploit-db.com
35

AI Score

7.4

Confidence

Low

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=759

There is a use-after-free in MovieClip.duplicateMovieClip.If an action associated with the MovieClip frees the clip provided as the initObject parameter to the call, it will be used after it is freed.A PoC is attached.


Proof of Concept:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/39779.zip