Lucene search

K
zdtGoogle Security Research1337DAY-ID-27080
HistoryFeb 22, 2017 - 12:00 a.m.

Adobe Flash - YUVPlane Decoding Heap Overflow Exploit

2017-02-2200:00:00
Google Security Research
0day.today
18

0.925 High

EPSS

Percentile

99.0%

Exploit for multiple platform in category dos / poc

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1008
 
The attached FLV file causes a heap overflow in YUVPlane decoding.
 
To reproduce, put LoadMP4.swf and yuvplane.flv on a server, and visit 127.0.0.1/LoadMP4.swf?file=yvplane.flv.

#  0day.today [2018-02-17]  #