Adobe Flash - H264 File Stack Corruption

🗓️ 17 Feb 2016 00:00:00Reported by Google Security ResearchType

zdt🔗 0day.today👁 29 Views

Adobe Flash H264 file stack corruptio

Reporter	Title	Published	Views	Family All 98
FreeBSD	flash -- multiple vulnerabilities	9 Feb 201600:00	–	freebsd
Tenable Nessus	Flash Player < 20.0.0.306 Multiple Vulnerabilities (APSB16-04)	30 Mar 201600:00	–	nessus
Tenable Nessus	Adobe AIR < 20.0.0.260 Multiple Vulnerabilities (APSB16-04)	30 Mar 201600:00	–	nessus
Tenable Nessus	Adobe AIR <= 20.0.0.233 Multiple Vulnerabilities (APSB16-04)	9 Feb 201600:00	–	nessus
Tenable Nessus	Adobe Flash Player <= 20.0.0.286 Multiple Vulnerabilities (APSB16-04)	9 Feb 201600:00	–	nessus
Tenable Nessus	FreeBSD : flash -- multiple vulnerabilities (5d8e56c3-9e67-4d5b-81c9-3a409dfd705f)	11 Feb 201600:00	–	nessus
Tenable Nessus	GLSA-201603-07 : Adobe Flash Player: Multiple vulnerabilities	14 Mar 201600:00	–	nessus
Tenable Nessus	Adobe AIR for Mac <= 20.0.0.233 Multiple Vulnerabilities (APSB16-04)	9 Feb 201600:00	–	nessus
Tenable Nessus	Adobe Flash Player for Mac <= 20.0.0.286 Multiple Vulnerabilities (APSB16-04)	9 Feb 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : flash-player (openSUSE-2016-183)	11 Feb 201600:00	–	nessus

Source: https://code.google.com/p/google-security-research/issues/detail?id=633
 
The attached flv file causes stack corruption when loaded into Flash. To use the PoC, load LoadMP42.swf?file=lownull.flv from a remote server.
 
 
Proof of Concept:
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/39466.zip

#  0day.today [2018-01-04]  #

17 Feb 2016 00:00Current

0.1Low risk

Vulners AI Score0.1

EPSS0.4906