Subscribe via feed.

Adobe Flash IExternalizable.readExternal Type Confusion

Posted by deepcore on December 15, 2015 – 9:17 pm

If IExternalizable.readExternal is overridden with a value that is not a function, Flash assumes it is a function even though it is not one. This leads to execution of a ‘method’ outside of the ActionScript object’s ActionScript vtable, leading to memory corruption.


This post is under “exploit” and has no respond so far.
If you enjoy this article, make sure you subscribe to my RSS Feed.

Post a reply

You must be logged in to post a comment.