Other nomination

AIR Flash RCE from PWN2OWN

Chris Brook · Threatpost | The first stop for security news · 9 April 2014

Adobe shipped fixes for four critical Flash Player and AIR flaws, among them the use-after-free Vupen used at Pwn2Own. That bug was chained with a JIT spray and a sandbox escape to execute code through Flash inside Internet Explorer 11; the same update covers a buffer overflow, a security bypass and a cross-site scripting issue.

Record

Researcher

Chris Brook

Published by

Threatpost | The first stop for security news

Date

9 April 2014

In the archive

• Nominated for the 2014 Top 10 Web Hacking Techniques

Tags

• rce
• sandbox-escape
• flash
• cve
• vendor-advisory
• xss
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of Chris Brook, first published at the original source. Preserved copies are kept so the citation survives its host.