Adobe Flash MovieClip.duplicateMovieClip Use-After-Free
Posted by deepcore on December 18, 2015 – 9:47 pm
There is a use-after-free in MovieClip.duplicateMovieClip. If the depth or movie name parameter provided is an object with toString or valueOf defined, this method can free the MovieClip, which is then used.
Post a reply
You must be logged in to post a comment.