Issue 59 - nativeclient - Browser Plugin NPAPI Invoke Stack Overflow

Issue 59:	Browser Plugin NPAPI Invoke Stack Overflow	‹ Prev 4 of 97 Next ›
	4 people starred this issue and may be notified of changes.	Back to list

Status:	Accepted
Owner:	s...@google.com
Security-Contest
Type-Defect

Reported by ben.haw...@paradise.net.nz, Mar 12, 2009

Team: Beached As

A stack overflow exists in the NPAPI browser plugin's scripting capability, 
specifically NPObjectProxy's Invoke method when handling conversion between 
different ABIs. It can be triggered on Windows systems by supplying a large 
number of arguments to an NPAPI function call (greater than 256 to cause 
corruption).

npapi_invoke.zip
166 KB Download

Comment 1 by nativeclient.admin, Apr 01, 2009

(No comment was entered for this change.)

Owner: s...@google.com

Comment 2 by nativeclient.admin, Apr 06, 2009

Verified as an issue

Status: Accepted
Labels: Type-Defect

Comment 3 by bradnel...@google.com, Dec 03, 2009

(No comment was entered for this change.)

Owner: s...@google.com