地图 / Flash type confusion vulnerability leads to code execution

Flash type confusion vulnerability leads to code execution

代码执行 / Unlabeled / #2106

厂商: Internet Bug Bounty
严重程度: 未评级
赏金: —
弱点: Unlabeled
研究员: @bannedit
披露日期: 2013-12-10
资产: IBB (Legacy)
CVE: CVE-2013-5331

该报告还没有中文解读。

原文摘录

摘自原文（112 字符中的一小部分）

_This bug was reported directly to Adobe._

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Internet Bug Bounty 所有。

时间线

2013-12-10报告提交
2013-12-10公开披露

阅读 HackerOne 原文 ↗作者 @bannedit · 版权归作者与 Internet Bug Bounty 所有

同类报告

CVE-2020-8913 - Persistent arbitrary code execution in Android's Google Play Core Library: details, explanation and the PoCGoogle · —Remote code execution [CVE-2023-36845]MTN Group · 2024-10-09 Remote Code Execution on Proxy Service (as root)██████ · —XSS Vulnerability on Pressable/Atomic Hosting Platform via unescaped admin notices leads to code executionAutomattic · 2026-02-18 Remote Code Execution via unsafe usage of `reply.view({ raw })` in @fastify/view (EJS template engine)Fastify · 2025-05-28 Reflected XSS and Server Side Template Injection in all HubSpot CMSesHubSpot Inactive · —