Adobe Flash - ATF Processing Overflow
🗓️ 11 Jul 2016 00:00:00Reported by Google Security ResearchType 
exploitdb🔗 www.exploit-db.com👁 37 Views
| Reporter | Title | Published | Views | Family All 64 |
|---|---|---|---|---|
 | flash -- multiple vulnerabilities | 16 Jun 201600:00 | – | freebsd |
 | Adobe Flash - ATF Processing Overflow | 11 Jul 201600:00 | – | zdt |
 | Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt63 | 27 Jun 201600:00 | – | altlinux |
| Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt63 | 27 Jun 201600:00 | – | altlinux |
 | flashplugin: multiple issues | 19 Jun 201600:00 | – | archlinux |
| lib32-flashplugin: multiple issues | 20 Jun 201600:00 | – | archlinux |
 | Flash Player Information Disclosure | 11 Jul 201600:00 | – | bdu_fstec |
 | CVE-2016-4135 | 11 Jul 201600:00 | – | circl |
 | Unspecified Heap Overflow Vulnerability in Microsoft Internet Explorer and Microsoft Edge Adobe Flash Player | 19 Jun 201600:00 | – | cnvd |
 | Adobe Flash Player Heap Overflow (APSB16-18: CVE-2016-4135) | 13 Jun 201600:00 | – | checkpoint_advisories |
10
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=786
The attached ATF file causes a heap overflow in ATF processing. To reproduce this issue, put LoadImage.swf and test.png on a remote server, and visit http://127.0.0.1/LoadImage.swf?img=test.png.
To differentiate this from other ATF issues, this is an overflow in decompressing alphas when an image has a height of 1 pixel.
Proof of Concept:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40087.zipData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
11 Jul 2016 00:00Current
8.1High risk
Vulners AI Score8.1
CVSS 3.18.8
CVSS 29.3
EPSS0.16544