Sploitus

Exploit for Immunity Canvas: ADOBE_FLASH_METADATA_UAF

canvas Β· 2019-01-18

Exploit Code

MARKDOWN21 lines
## https://sploitus.com/exploit?id=ADOBE_FLASH_METADATA_UAF
**Name**|  adobe_flash_metadata_uaf  
---|---  
**CVE**|  CVE-2018-15982  
**Exploit Pack**|  [CANVAS](<http://http://www.immunityinc.com/products-canvas.shtml>)  
**Description**| adobe_flash_metadata_uaf  
**Notes**| CVE Name: CVE-2018-15982  
VENDOR: Adobe  
NOTES: In the package com.adobe.tvsdk.mediacore.metadata the setObject method  
does not set a reference to the key String Object so if we force the GC  
this memory will be released but it will still be in our vector (Use-After-Free).  
  
This exploit only support x86 targets, this has been tested on Windows 7 with  
Flash Player 31.0.0.153.  
  
VersionsAffected: Affects all Flash versions from 19.0 up to and including 31.0.0.153  
Repeatability: Infinite  
References:   
CVE Url: https://vulners.com/cve/CVE-2018-15982  
Date public: 07/12/2018  
CVSS: N/A