Macromedia Flash Player array index overflow updated since 05.11.2005
Published:		07.11.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		5426
Type:		client
Level:		7/10
Description:		User controlled value is used as function pointers array index without boundary control.

Affected:		MICROSOFT : Internet Explorer 5.5
		MICROSOFT : Internet Explorer 6.0
		MACROMEDIA : Flash Player 6.0
		NETSCAPE : Netscape 7.2
		OPERA : Opera 8.0
		NETSCAPE : Netscape 8.0
		ADOBE : Flash Player 7.0

Original document		SECUNIA, [SA17437] Opera Macromedia Flash Player SWF Arbitrary Code Execution (07.11.2005)
		SECUNIA, [SA17481] Internet Explorer Macromedia Flash Player SWF Arbitrary Code Execution (07.11.2005)
		Daniel Fabian, [Full-disclosure] SEC Consult SA-20051107-1 :: Macromedia Flash Player ActionDefineFunction Memory Corruption (07.11.2005)
		Juha-Matti Laurio, Netscape Flash Player Arbitrary Code Execution Vulnerability (07.11.2005)
		EEYE, [Full-disclosure] [EEYEB-20050627B] Macromedia Flash Player Improper Memory Access Vulnerability (05.11.2005)

Files:		MPSB05-07 Flash Player ActionDefineFunction Memory Corruption test file
		Macromedia Flash Plugin - Buffer Overflow in flash.ocx
Discuss:		Read or add your comments to this news (0 comments)