Robert Hensing's Blog

Software Security . . . and stuff.

Flash NULL pointer + offset code execution . . .

Flash NULL pointer + offset code execution . . .

  • Comments 2
  • Likes

I tend to agree - Mark Dowd is clearly not human: http://www.matasano.com/log/1032/this-new-vulnerability-dowds-inhuman-flash-exploit/

This kind of thing makes me want to like . . . go work on cars or something. :)

So here's what's sort of scary about Mark's paper and mentioned in the Matasano post - but worth reiterating here . . . this paper could usher in a new era of reliable exploitation for Flash based vulnerabilities. 
Sort of like what Skylined did for IE exploitation using Javascript based heap spray . . .

Harsh times . . .

Comments
  • Must be synchronicity. I started out the day with a really interesting mail from Chris Wysopal talking

  • "Flash vulnerability" story: I'm bumping this up to my weblog, because OS News requires membership for comments, and their source, Thomas Ptacek, has not yet published the comment I submitted. The Mark Dowd paper describes an issue which was addressed

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment