Adobe Flash TextField.sharpness Setter Use-After-Free
Posted by deepcore on December 18, 2015 – 9:47 pm
There is a use-after-free in the TextField sharpness setter. If the sharpness parameter is an object with valueOf set to a function which frees the TextField parent, it is used after it is freed.
Post a reply
You must be logged in to post a comment.