Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Exploiting CVE-2014-0556 in Flash

projectzero.google | advisory | CVE-2014-0556 | #exploitation | #flash | #adobe | #project-zero | #cve-2014-0556

Summary

A Google Project Zero write-up exploiting CVE-2014-0556, one of eight Project Zero-reported bugs fixed in Adobe's APSB14-21 Flash bulletin.
CVE
CVE-2014-0556
Published
Collected

original ↗

Related coverage

blog · projectzero.google
Three bypasses and a fix for one of Flash's Vector.<*> mitigations
After Flash 18.0.0.209 introduced two mitigations against Vector corruption abuse, Flash 18.0.0.232 changes one mitigation's implementation, and three bypasses of it are demonstrated.
blog · projectzero.google
A Tale of Two Exploits
A Google Project Zero deep dive into the exploitation techniques used against a Flash Player scripting vulnerability.
vulnerability · projectzero.google
(^Exploiting)\s*(CVE-2015-0318)\s*(in)\s*(Flash$)
A Google Project Zero write-up exploiting CVE-2015-0318, a bug in the PCRE regular expression engine as used in Adobe Flash.
blog · projectzero.google
What does a pointer look like, anyway?
A Google Project Zero post examining memory information disclosure vulnerabilities in Flash Player and how leaked data aids exploitation.
blog · projectzero.google
Life After the Isolated Heap
An examination of Adobe Flash Player heap changes after the Isolated Heap, using an exploit built on two post-Isolated-Heap bugs to assess their impact on exploitability of use-after-free issues.
blog · projectzero.google
Attacking ECMAScript Engines with Redefinition
Dynamic redefinition of ECMAScript functions and variables can break native code assumptions; Project Zero found 24 such vulnerabilities in Adobe Flash, with similar issues seen in the wild.
back