Adobe Flash - Overflow in Slab Rendering

Author: Google Security Research
type: dos
platform: multiple
port: 0
date_added: 2018-04-24
date_updated: 2018-04-24
verified: 1
codes: CVE-2018-4935
tags: 
aliases: 
screenshot_url: 
application_url: 

The attached fuzzed swf file causes heap or stack corruption (depending on platform) when rendering a slab.

This PoC crashes a little bit unreliably, it is the most reliable in the standalone Flash player and Microsoft Edge.


Proof of Concept:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/44527.zip