Memory exhaustion vulnerability in libming 'parseSWF_ACTIONRECORD' function

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A memory exhaustion vulnerability exists in the 'parseSWFACTIONRECORD' function in the util/parser.c file in libming version 0.4.8. A remote...

Adobe Flash Player 23.0.0.162 - '.SWF' ConstantPool Critical Memory Corruption

Application: Adobe Flash Player Platforms: Windows,OSX Versions: 23.0.0.162 and earlier Author: Francis Provencher of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: October 11, 2016 CVE-2016-4273 COSIG-2016-35 1 Introduction 2 Report Timeline 3 Technical details 4 POC...