Flash UAF With Color.setRGB In AS2

Discussion in 'News Aggregator' started by Packet Storm, 21 Aug 2015.

  1. Packet Storm

    Packet Storm Guest

    When calling Color.setRGB in AS2 it is possible to free the target_mc object used in the Color constructor while a reference remains in the stack.

    Continue reading...
     

Share This Page

Loading...