[Dailydave] Papers to be read immediately by Mark Dowd+=1

[Mark Dowd]

Hey there,

I was actually going to post about this myself, but OK :). For anyone
interested, Adobe recently released a patch for Flash Player that addressed
several vulnerabilities, one of which I discovered. I found a pretty
interesting way to get reliable execution by leveraging the mechanics of the
ActionScript Virtual Machine (AVM). Essentially the technique revolves
around being able to run unverified ActionScript, which is decidedly bad as
it turns out. As Dave already pointed out, the document is availables at
http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf.

Enjoy!

-mark

PS. I still don't know anything about X.25!

On Sat, Apr 12, 2008 at 8:49 AM, Dave Aitel <dave.aitel at gmail.com> wrote:

> http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf
>
> Word up to duke who once, long ago, was just another cool cat trying to
> learn X.25 on the Internet Relay Chat.
>
> -dave
>
>
> _______________________________________________
> Dailydave mailing list
> Dailydave at lists.immunitysec.com
> http://lists.immunitysec.com/mailman/listinfo/dailydave
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.immunitysec.com/pipermail/dailydave/attachments/20080412/25695ccc/attachment.htm