Internet Bug Bounty · Report #119652
Adobe Flash Player ASnative(101,10) Memory Corruption Vulnerability
Validstatus
$5,000bounty
1upvotes
12 Nov 2019disclosed
How it was found
I. Summary Adobe Flash Player is prone to a vulnerability which leads to Memory Corruption.
II. Description When ASnative(101,10) is called with a MovieClip object pointer, Flash Player is crashed due to an invalid EIP value. Carefully crafted swf file may allow the attacker to hijack the EIP, leading to shellcode execution in the context of affected application.
Lastest version of Adobe Flash Player 20.0.0.267 has been tested under Windows 7.
III. Impact Memory Corruption
IV. Credit Wen Guanxing from Venustech ADLAB is credited for this vulnerability.
It has been assigned as CVE-2016-0981 by Adobe. https://helpx.adobe.com/security/products/flash-player/apsb16-04.html