Subscribe via feed.

Adobe Flash TextField.tabIndex Setter Use-After-Free

Posted by deepcore on December 18, 2015 – 9:47 pm

There is a use-after-free in the TextField.tabIndex setter. If the integer parameter is an object with valueOf defined, then it can free the TextField’s parent, leading to a use-after-free.


This post is under “exploit” and has no respond so far.
If you enjoy this article, make sure you subscribe to my RSS Feed.

Post a reply

You must be logged in to post a comment.


« »