Adobe Flash TextField.setFormat Use-After-Free
Posted by deepcore on December 18, 2015 – 9:47 pm
The TextField setFormat method contains a use-after-free. If an integer parameter has valueOf defined, or the object parameter overrides a constructor, this method can free the TextField parent, which is subsequently used.
Post a reply
You must be logged in to post a comment.