Hey there,<br><br>I was actually going to post about this myself, but OK :). For anyone interested, Adobe recently released a patch for Flash Player that addressed several vulnerabilities, one of which I discovered. I found a pretty interesting way to get reliable execution by leveraging the mechanics of the ActionScript Virtual Machine (AVM). Essentially the technique revolves around being able to run unverified ActionScript, which is decidedly bad as it turns out. As Dave already pointed out, the document is availables at <a href="http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf">http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf</a>.<br>
<br>Enjoy!<br><br>-mark<br><br>PS. I still don't know anything about X.25!<br><br><div class="gmail_quote">On Sat, Apr 12, 2008 at 8:49 AM, Dave Aitel <<a href="mailto:dave.aitel@gmail.com">dave.aitel@gmail.com</a>> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><a href="http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf" target="_blank">http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf</a><br>
<br>Word up to duke who once, long ago, was just another cool cat trying to learn X.25 on the Internet Relay Chat.<br><font color="#888888">
<br>-dave<br><br>
</font><br>_______________________________________________<br>
Dailydave mailing list<br>
<a href="mailto:Dailydave@lists.immunitysec.com">Dailydave@lists.immunitysec.com</a><br>
<a href="http://lists.immunitysec.com/mailman/listinfo/dailydave" target="_blank">http://lists.immunitysec.com/mailman/listinfo/dailydave</a><br>
<br></blockquote></div><br>