Flash Bad / Wild Write In XML When Callback Modifies XML Tree

Discussion in 'News Aggregator' started by Packet Storm, 21 Aug 2015.

  1. Packet Storm

    Packet Storm Guest

    The proof of concept works by triggering a wild copy in order to demonstrate the crash. But other side-effects are possible such as decrementing the refcount of an out-of-bounds index.

    Continue reading...
     

Share This Page

Loading...