Adobe Flash MovieClip.duplicateMovieClip Use-After-Free

Discussion in 'News Aggregator' started by Packet Storm, 18 Dec 2015.

  1. Packet Storm

    Packet Storm Guest

    There is a use-after-free in MovieClip.duplicateMovieClip. If the depth or movie name parameter provided is an object with toString or valueOf defined, this method can free the MovieClip, which is then used.

    Continue reading...
     

Share This Page

Loading...