Adobe AIR < 20.0.0.260 Multiple Vulnerabilities (APSB16-04)

Binary data 9154.prm...

Adobe Flash - Sound.loadPCMFromByteArray Dangling Pointer

Source: https://code.google.com/p/google-security-research/issues/detail?id=698 There is a dangling pointer that can be read, but not written to in loadPCMFromByteArray. A minimal PoC is as follows: var s = new Sound; var b = new ByteArray; for var i = 0; i 1600; i++ b.writeByte1; b.position = 0;...

Adobe Flash - Sound.loadPCMFromByteArray Dangling Pointer

Adobe Flash - Sound.loadPCMFromByteArray Dangling Pointer Source: https://code.google.com/p/google-security-research/issues/detail?id=698 There is a dangling pointer that can be read, but not written to in loadPCMFromByteArray. A minimal PoC is as follows: var s = new Sound; var b = new ByteArray...

Adobe Flash - Sound.loadPCMFromByteArray Dangling Pointer

Exploit for multiple platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=698 There is a dangling pointer that can be read, but not written to in loadPCMFromByteArray. A minimal PoC is as follows: var s = new Sound; var b = new ByteArray; for...