Adobe Flash TextField.thickness Setter Use-After-Free

Discussion in 'News Aggregator' started by Packet Storm, 18 Dec 2015.

  1. Packet Storm

    Packet Storm Guest

    There is a use-after-free in the TextField thickness setter. If the thickness parameter is an object with valueOf set to a function which frees the TextField parent, it is used after it is freed.

    Continue reading...
     
    #1 Packet Storm, 18 Dec 2015
(You must log in or sign up to post here.)

Share This Page

Loading...