Bug ID 565347: Rewrite engine behaves improperly in case of AS2 SWF with a badly formatted 'push' instruction

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10, 11.6.1, 11.6.2, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6

Fixed In:
13.0.0, 12.1.3.7, 11.6.3

Opened: Jan 01, 2016

Severity: 3-Major

Symptoms

Rewrite engine behaves improperly in case of AS2 SWF with a string in 'push' instruction longer than the instruction length itself.

Impact

Rewrite coredump.

Conditions

Any AS2 SWF with a string in 'push' instruction longer than the instruction length.

Workaround

It can be worked around by adding an Portal Access profile resource item with Flash patcher turned off for improper SWF content.

Fix Information

Completely fixed.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips