4 ms·

Can you expand as that? Did they break out via the service runtime, or through an implementation defect in the validator? I recall that Chris Rohlf presented a

Can you expand as that? Did they break out via the service runtime, or through an implementation defect in the validator? I recall that Chris Rohlf presented an implementation defect in one of the two at a Black Hat conference some years back, but the sandboxing is otherwise solid.

scurvy 11y ago
They don't go into detail, but Google confirms you can break out of the sandbox by coupling a Flash exploit with an OS exploit. http://krebsonsecurity.com/2015/07/adobe-to-patch-hacking-teams-flash-zero-day/ http://krebsonsecurity.com/2015/07/adobe-to-patch-hacking-te...