http://www.secuobs.com L'observatoire de la securite Internet fr webmaster@secuobs.com Dissecting Flash with EASE http://www.secuobs.com/revue/news/333162.shtml http://www.secuobs.com/news/comments504122007-swfintruder.shtml#11122 http://www.secuobs.com/news/comments504122007-swfintruder.shtml#11122 Adobe patches critical Flash Player flaws after Google fixes zero-day bug in Chrome http://www.secuobs.com/revue/news/330273.shtml http://www.secuobs.com/news/comments504122007-swfintruder.shtml#10953 http://www.secuobs.com/news/comments504122007-swfintruder.shtml#10953 Emergency patch expected for Flash Player, Wed, Sep 21st http://www.secuobs.com/revue/news/330064.shtml http://www.secuobs.com/news/comments504122007-swfintruder.shtml#10933 http://www.secuobs.com/news/comments504122007-swfintruder.shtml#10933 UPDATE SWFRETools v1.4.0 http://www.secuobs.com/revue/news/327508.shtml http://www.secuobs.com/news/comments404122007-swfintruder.shtml#10784 http://www.secuobs.com/news/comments404122007-swfintruder.shtml#10784 ESRT @GregFeezel @lennyzeltser - An attempt to use malicious Flash banner ads to launche a DDoS - by @StopMalvertisin http://www.secuobs.com/twitter/news/230850.shtml http://www.secuobs.com/news/comments404122007-swfintruder.shtml#10260 http://www.secuobs.com/news/comments404122007-swfintruder.shtml#10260 Adobe Release Flash Player 10.3.181.34 http://www.secuobs.com/revue/news/314443.shtml http://www.secuobs.com/news/comments404122007-swfintruder.shtml#9999 http://www.secuobs.com/news/comments404122007-swfintruder.shtml#9999 Release of SWFRETools 1.2.0 http://www.secuobs.com/revue/news/309827.shtml http://www.secuobs.com/news/comments404122007-swfintruder.shtml#9853 http://www.secuobs.com/news/comments404122007-swfintruder.shtml#9853 Adobe releases Flash Player patch on a Sunday to combat latest 0day http://www.secuobs.com/revue/news/309274.shtml http://www.secuobs.com/news/comments404122007-swfintruder.shtml#9810 http://www.secuobs.com/news/comments404122007-swfintruder.shtml#9810 Release of SWFRETools 1.1.0 http://www.secuobs.com/revue/news/303431.shtml http://www.secuobs.com/news/comments404122007-swfintruder.shtml#9579 http://www.secuobs.com/news/comments404122007-swfintruder.shtml#9579 ESRT @MalwareScene - Drive-By Downloads Attack Adobe Zero-Day Flaw http://www.secuobs.com/twitter/news/202575.shtml http://www.secuobs.com/news/comments404122007-swfintruder.shtml#9570 http://www.secuobs.com/news/comments404122007-swfintruder.shtml#9570 AMFShell The Action Message Format Shell http://www.secuobs.com/revue/news/302304.shtml http://www.secuobs.com/news/comments404122007-swfintruder.shtml#9537 http://www.secuobs.com/news/comments404122007-swfintruder.shtml#9537 ESRT @mwtracker - malware tracker: PDFExaminer Flash Handling - decompresses and scans CWS http://www.secuobs.com/twitter/news/198021.shtml http://www.secuobs.com/news/comments404122007-swfintruder.shtml#9434 http://www.secuobs.com/news/comments404122007-swfintruder.shtml#9434 ESRT @dloss - SWFRETools for reverse engineering Flash files. By @LambdaCube, who created PDF Dissector http://www.secuobs.com/twitter/news/197940.shtml http://www.secuobs.com/news/comments404122007-swfintruder.shtml#9432 http://www.secuobs.com/news/comments404122007-swfintruder.shtml#9432 ESRT @patrikrunald - Adobe release update to Flash to fix latest 0-day http://www.secuobs.com/twitter/news/196253.shtml http://www.secuobs.com/news/comments404122007-swfintruder.shtml#9394 http://www.secuobs.com/news/comments404122007-swfintruder.shtml#9394 ESRT @securitybananas @FSEMEA - Adobe releases emergency update for Flash Player zero-day actively being abused http://www.secuobs.com/twitter/news/195623.shtml http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9375 http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9375 Volatility and The Flash Player Zero Day http://www.secuobs.com/revue/news/298025.shtml http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9357 http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9357 ESRT @briankrebs - 1 of 42 anti-virus engines at Virustotal detected this tainted Word and Flash 0day attack as malicious http://www.secuobs.com/twitter/news/194327.shtml http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9348 http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9348 One more Adobe 0-day vulnerability using Office files http://www.secuobs.com/revue/news/297696.shtml http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9346 http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9346 ESRT @netForensics - Metasploit - Adobe Flash CVE-2011-060 http://www.secuobs.com/twitter/news/189312.shtml http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9242 http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9242 ESRT @VUPEN - How we bypassed ASLR and reliably exploited the recent Flash 0day CVE-2011-0609 on Windows 7 http://www.secuobs.com/twitter/news/189317.shtml http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9241 http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9241 ESRT @Fortinet - Advanced Exploitation of the Recent Flash Zero-day Vulnerability CVE-2011-0609 by Haifei Li http://www.secuobs.com/twitter/news/187018.shtml http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9185 http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9185 Adobe Attacks on Flash Player Flaw http://www.secuobs.com/revue/news/291584.shtml http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9115 http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9115 Black Box Auditing Adobe Shockwave http://www.secuobs.com/revue/news/291175.shtml http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9098 http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9098 Adobe releases Flash Player 10.3 Beta http://www.secuobs.com/revue/news/290343.shtml http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9069 http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9069 ESRT @darkoperator - Embedded JavaScript in SWF http://www.secuobs.com/twitter/news/181945.shtml http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9060 http://www.secuobs.com/news/comments304122007-swfintruder.shtml#9060 Adobe to finally give users better control over Flash cookies http://www.secuobs.com/revue/news/278066.shtml http://www.secuobs.com/news/comments204122007-swfintruder.shtml#8635 http://www.secuobs.com/news/comments204122007-swfintruder.shtml#8635 Researcher describes method for bypassing Adobe Flash sandbox http://www.secuobs.com/revue/news/276393.shtml http://www.secuobs.com/news/comments204122007-swfintruder.shtml#8555 http://www.secuobs.com/news/comments204122007-swfintruder.shtml#8555 remote - Adobe Shockwave player rcsL chunk memory corruption 0day http://www.secuobs.com/revue/news/258975.shtml http://www.secuobs.com/news/comments204122007-swfintruder.shtml#7807 http://www.secuobs.com/news/comments204122007-swfintruder.shtml#7807 papers - MOAUB 23 - Adobe Acrobat Reader and Flash 'newfunction' Remote Code Execution Vulnerability http://www.secuobs.com/revue/news/250983.shtml http://www.secuobs.com/news/comments204122007-swfintruder.shtml#7481 http://www.secuobs.com/news/comments204122007-swfintruder.shtml#7481 papers - MOAUB 22 - Adobe Shockwave Director tSAC Chunk Memory Corruption http://www.secuobs.com/revue/news/250608.shtml http://www.secuobs.com/news/comments204122007-swfintruder.shtml#7470 http://www.secuobs.com/news/comments204122007-swfintruder.shtml#7470 Adobe Patches Critical Flash Bug http://www.secuobs.com/revue/news/249953.shtml http://www.secuobs.com/news/comments204122007-swfintruder.shtml#7432 http://www.secuobs.com/news/comments204122007-swfintruder.shtml#7432 Adobe Patches Critical Shockwave, ColdFusion holes http://www.secuobs.com/revue/news/221146.shtml http://www.secuobs.com/news/comments204122007-swfintruder.shtml#6140 http://www.secuobs.com/news/comments204122007-swfintruder.shtml#6140 BlackHatEU : Defending the Poor - about defending against Flash based web application exploits - Blitzableiter tool http://www.secuobs.com/revue/news/211985.shtml http://www.secuobs.com/news/comments204122007-swfintruder.shtml#5764 http://www.secuobs.com/news/comments204122007-swfintruder.shtml#5764 OWASP AIR Flash Security Projects http://www.secuobs.com/revue/news/209264.shtml http://www.secuobs.com/news/comments204122007-swfintruder.shtml#5670 http://www.secuobs.com/news/comments204122007-swfintruder.shtml#5670 Adobe Flash Now Supports InPrivate Browsing http://www.secuobs.com/revue/news/191491.shtml http://www.secuobs.com/news/comments204122007-swfintruder.shtml#5034 http://www.secuobs.com/news/comments204122007-swfintruder.shtml#5034 Adobe Flash Player 10.0.45.2 and AIR 1.5.3.1930 released to correct vulnerability CVE-2010-0186 http://www.secuobs.com/revue/news/191188.shtml http://www.secuobs.com/news/comments204122007-swfintruder.shtml#5020 http://www.secuobs.com/news/comments204122007-swfintruder.shtml#5020 Adobe Error Leaves Flash Flaw Unpatched for 16 Months http://www.secuobs.com/revue/news/190100.shtml http://www.secuobs.com/news/comments104122007-swfintruder.shtml#4963 http://www.secuobs.com/news/comments104122007-swfintruder.shtml#4963 A Lazy Pen Tester's Guide to Testing Flash Applications http://www.secuobs.com/revue/news/189229.shtml http://www.secuobs.com/news/comments104122007-swfintruder.shtml#4911 http://www.secuobs.com/news/comments104122007-swfintruder.shtml#4911 Whitepaper : Neat, New, and Ridiculous Flash Hacks - Black Hat DC 2010 http://blackhat.com/presentations/bh-dc-10/Bailey_Mike/BlackHat-DC-2010-Bailey-Neat-New-Ridiculous-flash-hacks-wp.pdf http://www.secuobs.com/news/comments104122007-swfintruder.shtml#4877 http://www.secuobs.com/news/comments104122007-swfintruder.shtml#4877 Critical Flaws Haunt Adobe Shockwave Player http://www.secuobs.com/revue/news/183691.shtml http://www.secuobs.com/news/comments104122007-swfintruder.shtml#4611 http://www.secuobs.com/news/comments104122007-swfintruder.shtml#4611 Attention Windows XP users Update Flash Player now http://www.secuobs.com/revue/news/180843.shtml http://www.secuobs.com/news/comments104122007-swfintruder.shtml#4451 http://www.secuobs.com/news/comments104122007-swfintruder.shtml#4451 Adobe Patches Critical Flash Media Server Flaws http://www.secuobs.com/revue/news/174601.shtml http://www.secuobs.com/news/comments104122007-swfintruder.shtml#4204 http://www.secuobs.com/news/comments104122007-swfintruder.shtml#4204 Critical Adobe Flash Update http://www.secuobs.com/revue/news/169780.shtml http://www.secuobs.com/news/comments104122007-swfintruder.shtml#4048 http://www.secuobs.com/news/comments104122007-swfintruder.shtml#4048 ESRT @hackersorg [XSS Info] Re: xss in flash http://www.secuobs.com/twitter/news/42955.shtml http://www.secuobs.com/news/comments104122007-swfintruder.shtml#3964 http://www.secuobs.com/news/comments104122007-swfintruder.shtml#3964 New Exploit Masquerades As Flash Player Upgrade http://www.secuobs.com/revue/news/165445.shtml http://www.secuobs.com/news/comments104122007-swfintruder.shtml#3896 http://www.secuobs.com/news/comments104122007-swfintruder.shtml#3896 Why You Should Take the Adobe Flash Origin Issues Seriously http://www.secuobs.com/revue/news/161326.shtml http://www.secuobs.com/news/comments104122007-swfintruder.shtml#3767 http://www.secuobs.com/news/comments104122007-swfintruder.shtml#3767 Adobe fixes more bugs in Shockwave Player http://www.secuobs.com/revue/news/157275.shtml http://www.secuobs.com/news/comments104122007-swfintruder.shtml#3619 http://www.secuobs.com/news/comments104122007-swfintruder.shtml#3619 Video : ESRT @sam280 reverse engineering a flash malware http://www.secuobs.com/twitter/news/30204.shtml http://www.secuobs.com/news/comments04122007-swfintruder.shtml#3365 http://www.secuobs.com/news/comments04122007-swfintruder.shtml#3365 Flash attack vectors and worms http://www.secuobs.com/revue/news/133991.shtml http://www.secuobs.com/news/comments04122007-swfintruder.shtml#2877 http://www.secuobs.com/news/comments04122007-swfintruder.shtml#2877 Adobe Flex 3.3 SDK DOM-Based XSS http://www.secuobs.com/revue/news/132821.shtml http://www.secuobs.com/news/comments04122007-swfintruder.shtml#2830 http://www.secuobs.com/news/comments04122007-swfintruder.shtml#2830 Study Adobe Flash cookies pose vexing privacy questions http://www.secuobs.com/revue/news/129873.shtml http://www.secuobs.com/news/comments04122007-swfintruder.shtml#2697 http://www.secuobs.com/news/comments04122007-swfintruder.shtml#2697 Adobe Flash flaw exploited by malware in Microsoft Excel files http://www.secuobs.com/revue/news/128634.shtml http://www.secuobs.com/news/comments04122007-swfintruder.shtml#2650 http://www.secuobs.com/news/comments04122007-swfintruder.shtml#2650 Adobe Flash Player URL Parsing Heap Overflow Vulnerability http://www.secuobs.com/revue/news/128720.shtml http://www.secuobs.com/news/comments04122007-swfintruder.shtml#2647 http://www.secuobs.com/news/comments04122007-swfintruder.shtml#2647 Vidéo : Adobe Flash Player, AIR AVM2 intf_count Integer Overflow Remote Code Execution http://www.secuobs.com/revue/news/127343.shtml http://www.secuobs.com/news/comments04122007-swfintruder.shtml#2580 http://www.secuobs.com/news/comments04122007-swfintruder.shtml#2580 Adobe plagued by 16-month-old XSS bug http://www.secuobs.com/revue/news/96138.shtml http://www.secuobs.com/news/comments04122007-swfintruder.shtml#1455 http://www.secuobs.com/news/comments04122007-swfintruder.shtml#1455 HP SWFScan Misses XSS in Flash Apps http://www.secuobs.com/revue/news/86124.shtml http://www.secuobs.com/news/comments04122007-swfintruder.shtml#1143 http://www.secuobs.com/news/comments04122007-swfintruder.shtml#1143 SWFScan : Code in a Flash http://www.secuobs.com/revue/news/77949.shtml http://www.secuobs.com/news/comments04122007-swfintruder.shtml#923 http://www.secuobs.com/news/comments04122007-swfintruder.shtml#923 HP SWFScan a free Flash security tool todecompiles and audits applications written for the Flash platform. http://www.secuobs.com/revue/news/73596.shtml http://www.secuobs.com/news/comments04122007-swfintruder.shtml#827 http://www.secuobs.com/news/comments04122007-swfintruder.shtml#827