Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Life After the Isolated Heap

projectzero.google | blog | #use-after-free | #exploitation | #flash | #adobe | #heap | #isolated-heap

Summary

An examination of Adobe Flash Player heap changes after the Isolated Heap, using an exploit built on two post-Isolated-Heap bugs to assess their impact on exploitability of use-after-free issues.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
Three bypasses and a fix for one of Flash's Vector.<*> mitigations
After Flash 18.0.0.209 introduced two mitigations against Vector corruption abuse, Flash 18.0.0.232 changes one mitigation's implementation, and three bypasses of it are demonstrated.
advisory · projectzero.google
Exploiting CVE-2014-0556 in Flash
A Google Project Zero write-up exploiting CVE-2014-0556, one of eight Project Zero-reported bugs fixed in Adobe's APSB14-21 Flash bulletin.
blog · projectzero.google
Attacking ECMAScript Engines with Redefinition
Dynamic redefinition of ECMAScript functions and variables can break native code assumptions; Project Zero found 24 such vulnerabilities in Adobe Flash, with similar issues seen in the wild.
blog · projectzero.google
One Perfect Bug: Exploiting Type Confusion in Flash
A Google Project Zero analysis of a high-quality Flash type confusion bug and the factors that make it especially reliable for exploit development.
blog · projectzero.google
Significant Flash exploit mitigations are live in v18.0.0.209
A Google Project Zero post announcing exploit mitigations for Flash Player shipping in version 18.0.0.209, derived from the team's vulnerability research.
blog · projectzero.google
From inter to intra: gaining reliability
A Google Project Zero post describing techniques to increase exploitation reliability for an Adobe Flash vulnerability.
back