full-disclosure - MPSB05-07 Flash Player ActionDefineFunction Memory Corruption test file

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Fri Nov 18 09:10:39 2005
From: karma at DesignFolks.com.au (Karma)
Subject: MPSB05-07 Flash Player ActionDefineFunction
	Memory Corruption test file

Since sec-consult provided hex dumps, I thought I would turn it into a file for people who needed to test for vulnerable browsers. Remember to patch different plugins for different browsers, eg firefox and IE needs to both be patched seperately.

The test file is downloadable from http://www.designfolks.com.au/df.swf
It can be used to check for vulnerable versions of flash player which will crash the browser. Non vulnerable versions will simply display a yellow image. 

Original source and credits to www.sec-consult.com/228.html
Vendor Patch http://www.macromedia.com/devnet/security/security_zone/mpsb05-07.html

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20051118/9363d947/attachment.html