Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Three bypasses and a fix for one of Flash's Vector.<*> mitigations

projectzero.google | blog | #exploitation | #flash | #adobe | #mitigation-bypass | #vector

Summary

After Flash 18.0.0.209 introduced two mitigations against Vector corruption abuse, Flash 18.0.0.232 changes one mitigation's implementation, and three bypasses of it are demonstrated.
Published
Collected

original ↗

Related coverage

advisory · projectzero.google
Exploiting CVE-2014-0556 in Flash
A Google Project Zero write-up exploiting CVE-2014-0556, one of eight Project Zero-reported bugs fixed in Adobe's APSB14-21 Flash bulletin.
blog · projectzero.google
Life After the Isolated Heap
An examination of Adobe Flash Player heap changes after the Isolated Heap, using an exploit built on two post-Isolated-Heap bugs to assess their impact on exploitability of use-after-free issues.
blog · projectzero.google
Attacking ECMAScript Engines with Redefinition
Dynamic redefinition of ECMAScript functions and variables can break native code assumptions; Project Zero found 24 such vulnerabilities in Adobe Flash, with similar issues seen in the wild.
blog · projectzero.google
One Perfect Bug: Exploiting Type Confusion in Flash
A Google Project Zero analysis of a high-quality Flash type confusion bug and the factors that make it especially reliable for exploit development.
blog · projectzero.google
Significant Flash exploit mitigations are live in v18.0.0.209
A Google Project Zero post announcing exploit mitigations for Flash Player shipping in version 18.0.0.209, derived from the team's vulnerability research.
blog · projectzero.google
From inter to intra: gaining reliability
A Google Project Zero post describing techniques to increase exploitation reliability for an Adobe Flash vulnerability.
back