vendor:
Flash Player
by:
Dr_IDE
7,5
CVSS
HIGH
Denial of Service (DoS)
20
CWE
Product Name: Flash Player
Affected Version From: Macromedia Flash Player 6.0 r88
Affected Version To: Macromedia Flash Player 6.0 r88
Patch Exists: NO
Related CWE: N/A
CPE: a:macromedia:flash_player:6.0.88
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XPSP3 VM + IE7
2009
Flash Player (Flash6.ocx) AllowScriptAccess DoS PoC
This PoC triggers a NULL Pointer reference on a register operation when the 'AllowScriptAccess' parameter is written to ESI and EAX registers.
Mitigation:
Ensure that the 'AllowScriptAccess' parameter is not written to ESI and EAX registers.