Lucene search
Google Security ResearchEDB-ID:40089HistoryJul 11, 2016 - 12:00 a.m.
Adobe Flash - LMZA Property Decoding Heap Corruption
2016-07-1100:00:00
Google Security Research
www.exploit-db.com
12
AI Score
7.4
Confidence
Low
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=790
Loading the attached image causes heap corruption due to LMZA property decoding. To reproduce the issue, load the attach file '6' using LoadImage.swf as follows:
LoadImage.swf?img=6
The issue sometimes takes multiple refreshes to crash
Proof of Concept:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40089.zipRelated
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Memory Corruption (APSB16-18: CVE-2016-4137)
2016-06-19 00:00:00
redhatcve
redhatcve
CVE-2016-4137
2016-06-16 16:20:07
nvd
nvd
CVE-2016-4137
2016-06-16 14:59:18
prion
prion
Code injection
2016-06-16 14:59:00
cve
cve
CVE-2016-4137
2016-06-16 14:59:18
zdt
zdt
Adobe Flash - LMZA Property Decoding Heap Corruption
2016-07-11 00:00:00
cvelist
cvelist
CVE-2016-4137
2016-06-16 14:00:00
nessus
nessus
MS16-083: Security Update for Adobe Flash Player (3167685)
2016-06-17 00:00:00
openvas
openvas
Adobe Flash Player Security Update (APSB16-18) - Linux
2016-06-17 00:00:00
Adobe Flash Player Security Update (APSB16-18) - Windows
2016-06-17 00:00:00
Mageia: Security Advisory (MGASA-2016-0228)
2022-01-28 00:00:00
suse
suse
Security update for flash-player (critical)
2016-06-17 22:08:03
Security update for flash-player (critical)
2016-06-19 02:07:41
Security update for flash-player (critical)
2016-06-17 18:08:02
mageia
mageia
Updated flash-player-plugin packages fix security vulnerabilities
2016-06-17 08:58:14
altlinux
altlinux
freebsd
freebsd
flash -- multiple vulnerabilities
2016-06-16 00:00:00
kaspersky
kaspersky
KLA10830 Multiple vulnerabilities in Adobe Flash Player
2016-06-16 00:00:00
redhat
redhat
(RHSA-2016:1238) Critical: flash-plugin security update
2016-06-17 00:00:00
archlinux
archlinux
flashplugin: multiple issues
2016-06-19 00:00:00
lib32-flashplugin: multiple issues
2016-06-20 00:00:00
mscve
mscve
June 2016 Adobe Flash Security Update
2016-06-14 07:00:00