地图 / Adobe Flash Player Out-of-Bound Access Vulnerability

Adobe Flash Player Out-of-Bound Access Vulnerability

内存破坏 / 内存破坏（通用） / #47012

厂商: Internet Bug Bounty
严重程度: 未评级
赏金: $2,000
弱点: 内存破坏（通用）
研究员: @hhj4ck
披露日期: 2015-03-25
资产: IBB (Legacy)
CVE: CVE-2013-0634 CVE-2014-0559 CVE-2015-0330

该报告还没有中文解读。

原文摘录

摘自原文（3015 字符中的一小部分）

I. Summary Adobe Flash Player is prone to a vulnerability which leads to Out-of-Bound memory access memory via carefully crafted regular expression. An attacker can exploit this issue to defeat ASLR protection or even execute arbitrary code in the context of affected application (Internet Explorer, …

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Internet Bug Bounty 所有。

时间线

2015-02-07报告提交
2015-03-25公开披露

阅读 HackerOne 原文 ↗作者 @hhj4ck · 版权归作者与 Internet Bug Bounty 所有

同类报告

Race Conditions in Popular reports feature.HackerOne · 2016-08-03 Malformed .MDL triggers an Access Violation on GoldSRC (hl.exe)Valve · 2019-10-09 [FG-VD-19-009] Intel(R) Trace Analyzer and Collector 2019 Memory Corruption Vulnerability NotificationIntel Corporation · — · $1,500 Type Confusion Vulnerability - SOAP / make_http_soap_request()Internet Bug Bounty · 2019-10-15 · $1,000 Corrupted pointer in node::fs::ReadFileUtf8(const FunctionCallbackInfo<Value>& args) when args[0] is a string.Node.js · 2025-05-15 Heap overflow in mysqlnd related to BIT fields (CVE-2016-7412)Internet Bug Bounty · 2019-11-12