http://blogs.technet.com/robert_hensing/archive/2008/04/15/flash-null-pointer-offset-code-execution.aspxI tend to agree - Mark Dowd is clearly not human: http://www.matasano.com/log/1032/this-new-vulnerability-dowds-inhuman-flash-exploit/ This kind of thing makes me want to like . . . go work on cars or something. :) So here's what's sort of scary abouten-USCommunityServer 2.1 SP1 (Build: 61025.2)http://blogs.technet.com/robert_hensing/archive/2008/04/15/flash-null-pointer-offset-code-execution.aspx#3038206Thu, 17 Apr 2008 00:37:32 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3038206David LeBlanc's Web Log<p>Must be synchronicity. I started out the day with a really interesting mail from Chris Wysopal talking</p> http://blogs.technet.com/robert_hensing/archive/2008/04/15/flash-null-pointer-offset-code-execution.aspx#3038368Thu, 17 Apr 2008 07:09:06 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3038368JD on EP<p>&quot;Flash vulnerability&quot; story: I'm bumping this up to my weblog, because OS News requires membership for comments, and their source, Thomas Ptacek, has not yet published the comment I submitted. The Mark Dowd paper describes an issue which was addressed</p>