Adobe Flash DefineSceneAndFrameLabelData Parsing Memory Corruption Vulnerability
ZDI-08-032: May 22nd, 2008CVE ID
Affected Vendors
Affected Products
Vulnerability Details
TippingPoint Note: This issue was originally disclosed on April 8, 2008 as ZDI-08-022 but due to an error on our behalf the original advisory was clobbered and is now being re-released as ZDI-08-032.
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of the Adobe Flash Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the DLL responsible for parsing SWF tags. The vulnerable function trusts an offset present within the vulnerable tag and performs memory operations accordingly. By specifying certain values, an attacker is able to control a memory write leading to arbitrary code execution under the context of the currently logged in user.
Vendor Response
Adobe has issued an update to correct this vulnerability. More details can be found at:Disclosure Timeline
-
2008-02-07 - Vulnerability reported to vendor
2008-05-22 - Coordinated public release of advisory
Credit
This vulnerability was discovered by:-
wushi of team509
