4 ms·
Novice question--wouldn't getting exploited require that I visit a site of ill-repute? Or, alternatively, is there some cross-domain element that makes this a
by wensing 16y ago
Novice question--wouldn't getting exploited require that I visit a site of ill-repute?
Or, alternatively, is there some cross-domain element that makes this a threat even if I'm just seeing Flash-based ads on CNN.com?
- deleted 16y ago[deleted]
- joeyh 16y agoCVE-2010-2884 , like most prior exploits in flash, has the potential to let the attacker run arbitrary code. We're not talking javascript code either. BTW, anyone else think serving flash-based banner ads from untrusted third parties given its track record is well, the height of irresponsability?
- someone_here 16y agoCNN could be using an ad provider that just happens to not have enough ads so they outsourced to a few new ad networks and one accidentally let in a hacked ad.