header-logo
Suggest Exploit
vendor:
Unknown
by:
Project Zero
N/A
CVSS
N/A
Out-of-Bounds Read
125
CWE
Product Name: Unknown
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE: None
CPE: None
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: None
2016

Out-of-Bounds Read in JXR Processing

There is an out-of-bounds read in JXR processing which is probably not exploitable, but could be used an an information leak. To reproduce the issue, load the attach file '8' using LoadImage.swf as follows: LoadImage.swf?img=8

Mitigation:

None
Source

Exploit-DB raw data:

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=791

There is an out-of-bounds read in JXR processing. This issue is probably not exploitable, but could be used an an information leak.

To reproduce the issue, load the attach file '8' using LoadImage.swf as follows:

LoadImage.swf?img=8


Proof of Concept:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/39824.zip