header-logo
Suggest Exploit
vendor:
Flash Player
by:
Exploit Database
7.5
CVSS
HIGH
Heap Overflow
122
CWE
Product Name: Flash Player
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Platforms Tested: Standalone Flash Player, Microsoft Edge
2020

Heap Overflow in Flash Player

This PoC causes a heap overflow when playing a sound in a fuzzed swf file. It is most reliable in the standalone Flash player and Microsoft Edge.

Mitigation:

Update to the latest version of Flash Player
Source

Exploit-DB raw data:

The attached fuzzed swf file causes heap overflow when playing a sound.

This PoC crashes a little bit unreliably, it is the most reliable in the standalone Flash player and Microsoft Edge. 


Proof of Concept:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/44526.zip