4 ms·
Is there any Flash security bug recently which makes it outside the Chrome sandbox?
by therealmarv 11y ago
Is there any Flash security bug recently which makes it outside the Chrome sandbox?
- steveax 11y agoYep, the one that became public 5 days ago [1] [1]: https://krebsonsecurity.com/2015/07/adobe-to-patch-hacking-teams-flash-zero-day/ https://krebsonsecurity.com/2015/07/adobe-to-patch-hacking-t...
- bitmapbrother 11y agoOnly when used in tandem with a Windows exploit: "A spokesperson for Google confirmed that attackers could evade the Chrome sandbox by using the Flash exploit in tandem with another Windows vulnerability that appears to be unpatched at the moment."
- TD-Linux 11y agoThe Chrome sandbox isn't as strong as you might think. Flash needs access to a ton of stuff to work: - Camera / Microphone - Filesystem - GPU So there's plenty you can do without escaping the sandbox.