Dailydave: Re: Papers to be read immediately by Mark Dowd+=1

["Mark Dowd" <mark.dowd () gmail com>]

Hey there,

I was actually going to post about this myself, but OK :). For anyone
interested, Adobe recently released a patch for Flash Player that addressed
several vulnerabilities, one of which I discovered. I found a pretty
interesting way to get reliable execution by leveraging the mechanics of the
ActionScript Virtual Machine (AVM). Essentially the technique revolves
around being able to run unverified ActionScript, which is decidedly bad as
it turns out. As Dave already pointed out, the document is availables at
http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf.

Enjoy!

-mark

PS. I still don't know anything about X.25!

On Sat, Apr 12, 2008 at 8:49 AM, Dave Aitel <dave.aitel () gmail com> wrote:

> http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf
>
> Word up to duke who once, long ago, was just another cool cat trying to
> learn X.25 on the Internet Relay Chat.
>
> -dave
>
>
> _______________________________________________
> Dailydave mailing list
> Dailydave () lists immunitysec com
> http://lists.immunitysec.com/mailman/listinfo/dailydave
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave