New flash zero-day vulnerability

Immunity has developed an exploit which uses 2 holes in Adobe Flash and bypassed DEP and ASLR.

https://secure.security.nl/artikel/39461/1/Zero-day_lek_in_Adobe_Flash_Player_onthuld.html

https://lists.immunityinc.com/pipermail/dailydave/2011-December/000402.html

 

Topic exists Suggest thread merge.

 

Siljaline - two different things. The topic you linked is an Acrobat exploit.

 

According to that site it should bypass the Chrome and IE9 sandboxes.

 

Apologies for the oversight, @ Hungry Man

Carry on

 

Easy mistake.

I'm curious to see if this actually breaks the sandbox. I'm also wondering if it effects PPAPI.

 

Yup, none of us are perfect. As to the topic, Rich will likely come around and have a look under the hood. Or you could send a PM.

Regards,

 

Yeah I'm watching the video right now - didn't have a chance before.

IT's been tested on IE8, IE7, multiple OS's (XP, 7, OSX) and I havne't gotten to the Chrome part yet.

 

I tried to find the Actual exploit on there to DL & test, but couldn't find it ! Anyone know where it is Exactly ?

TIA

 

IT's through an exploit page, which I guess he hosts on his Linux VM and then connects to through IP on his Windows 7 VM.

IDK if it's available.

He also didn't show Chrome in the video - not that I doubt it. I just want to know if it was the PPAPI or not - probably not.

 

@ Hungry Man

Ahh so it's just a local exploit test ! OK thanks.

It sounded/read like it was available. If an exploit test www page were made available, then more of us could test it on different OS's browsers & configs etc Wonder why it isn't, as it would help all round ?

Also on here https://lists.immunityinc.com/pipermail/dailydave/2011-December/000402.html is this

But there's no mention of it that i can see ?

 

Perhaps they just haven't published it yet.

It wasn't a local exploit though - it was remote.

In the video he has 1 VM to host it and then he opens his browser in the 2nd VM and goes to the exploit page (hosted by VM1 ) or... something.

 

Do they have a POC for this? (Im DLing the vid now)

 

From H-online

More