POJIA破甲
地图 / Adobe Flash Player Race Condition Vulnerability

Adobe Flash Player Race Condition Vulnerability

内存破坏 / 内存破坏(通用) / #119657

厂商
Internet Bug Bounty
严重程度
未评级
赏金
$2,000
弱点
内存破坏(通用)
研究员
@hhj4ck
披露日期
2019-11-12
资产
IBB (Legacy)
CVE
CVE-2015-3103

该报告还没有中文解读。

原文摘录

摘自原文(540 字符中的一小部分)
Adobe Flash Player is prone to a race condition vulnerability which leads to Use After Free. COM Object will be initialized twice and uninitialized when the count number decrement to zero by the main thread. As we could force the second initialization being called by a Worker thread, the …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Internet Bug Bounty 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @hhj4ck · 版权归作者与 Internet Bug Bounty 所有

同类报告

Race Conditions in Popular reports feature.HackerOne · 2016-08-03Malformed .MDL triggers an Access Violation on GoldSRC (hl.exe)Valve · 2019-10-09[FG-VD-19-009] Intel(R) Trace Analyzer and Collector 2019 Memory Corruption Vulnerability NotificationIntel Corporation · — · $1,500Type Confusion Vulnerability - SOAP / make_http_soap_request()Internet Bug Bounty · 2019-10-15 · $1,000Corrupted pointer in node::fs::ReadFileUtf8(const FunctionCallbackInfo<Value>& args) when args[0] is a string.Node.js · 2025-05-15Heap overflow in mysqlnd related to BIT fields (CVE-2016-7412)Internet Bug Bounty · 2019-11-12