Slashdot Mirror
Adobe Flash Zero-Day Attack Underway
Robellus writes "Security researchers have found evidence of a previously unknown Adobe Flash vulnerability being exploited in the wild. The zero-day flaw has been added to the Chinese version of the MPack exploit kit and there are signs that the exploits are being injected into third-party sites to redirect targets to malware-laden servers. From the article: 'Continued investigation reveals this issue is fairly widespread. Malicious code is being injected into other third-party domains (approximately 20,000 web pages) most likely through SQL-injection attacks. The code then redirects users to sites hosting malicious Flash files exploiting this issue.'"
Situation Normal, All Flashed Up
What kind of horrible, horrible update scheme will Adobe come up with to try to combat this?! The thoughts are too terrible to imagine...
If you can read this... 01110101 01110010 00100000 01100001 00100000 01100111 01100101 01100101 01101011
It's Windows only because Microsoft wrote it to promote their Silverlight initiative. Siverlight doesn't work on Macs or Linux, so there's no point porting the exploit there.
echo -e 'global _start\n _start:\n mov eax, 2\n int 80h\n jmp _start' > a.asm; nasm a.asm -f elf; ld a.o -o a;
In France, a popular IT proverb says "Adobe, c'est de la daube". True one more time today...
(won't translate; lost in translation).
-- Rastignac was here.
An example of the knowledge of the masses: When I commented to my mother that I spent the day watching flash cartoons, she thought I meant animated porn.
Admit it. You post strawman arguments as AC so you get modded Insightful for refuting them, rather than Troll
Lucky guess?
I personally require none of that dada.
Slow down on the keyboard there, Oedipus.
This sig is part of your complete breakfast.
That's completely beside the point :P
Admit it. You post strawman arguments as AC so you get modded Insightful for refuting them, rather than Troll
Now that you mention it, Strongbad is topless far too often....
<:
If that's your definition, ('zero day' == ) then it still hasn't been used correctly, since the linked article is already a day old. ...
and
Given that the phrase 'zero day' is made of two single syllable words
OneSmartFellow isn't today.
Put identity in the browser.