Description: This code is a CVE-2016-1105 POC.
There is a type confusion issue in the FileReference constructor. The constructor adds several properties to the constructed object before setting the type and data. If a watch is set on one of these properties, code can be called and the object can be initialized to one with a destructor before the FileReference constructor sets the object data, leading to type confusion when the object is garbage collected.
To Search:
File list (Check if you may need any files):
39829
.....\myclass.as
__MACOSX
........\39829
........\.....\._myclass.as
39829\mysubclass.as
__MACOSX\39829\._mysubclass.as
39829\supertf.fla
__MACOSX\39829\._supertf.fla
39829\supertf.swf
__MACOSX\39829\._supertf.swf
Download