Bugtraq mailing list archives
Re: Internet Explorer and Opera local zone restriction bypass
From: william schulze <was () macromedia com>
Date: 30 Oct 2003 15:35:50 -0000
In-Reply-To: <20031024135303.26267.qmail () linuxmail org> All: Macromedia is dedicated to protecting the security of our customers, and we are taking steps to resolve this issue. To summarize, the Flash Player stores cookies in a somewhat predictable location (assuming the username can be guessed), and some of the contents are stored as plain text. While this is not in itself a directly exploitable vulnerability, an exploit can be created in combination with a security flaw in the browser. Macromedia will therefore make changes so that browser vulnerabilities of this nature cannot be exploited using the Flash Player. Once an updated Flash Player is available, we will post the new software and notify both our customers and the BugTraq community with this information. Any questions can be directed to <mailto:secure () macromedia com> secure () macromedia com. Regards, -was- William A. Schulze Sr. Director Flash Player Management Team Macromedia, Inc.
Current thread:
- Re: Internet Explorer and Opera local zone restriction bypass, (continued)
- Re: Internet Explorer and Opera local zone restriction bypass Andreas Sandblad (Oct 27)
- Re: Internet Explorer and Opera local zone restriction bypass Andreas Sandblad (Oct 27)
- Re: Internet Explorer and Opera local zone restriction bypass jelmer (Oct 28)
- RE: Internet Explorer and Opera local zone restriction bypass Thor Larholm (Oct 27)
- RE: Internet Explorer and Opera local zone restriction bypass Mindwarper * (Oct 27)
- Re: Internet Explorer and Opera local zone restriction bypass Heikki Toivonen (Oct 27)
- Re: Internet Explorer and Opera local zone restriction bypass Mohsen Hariri (Oct 27)
- Re: Internet Explorer and Opera local zone restriction bypass Paul Szabo (Oct 27)
- RE: Internet Explorer and Opera local zone restriction bypass Thor Larholm (Oct 28)
- Re: Internet Explorer and Opera local zone restriction bypass Bipin Gautam hUNT3R (Oct 28)
- Re: Internet Explorer and Opera local zone restriction bypass william schulze (Oct 30)
- RE: Internet Explorer and Opera local zone restriction bypass Francis Favorini (Oct 30)
- Re: Internet Explorer and Opera local zone restriction bypass Paul Szabo (Oct 30)
- RE: Internet Explorer and Opera local zone restriction bypass Thor Larholm (Oct 30)
- RE: Internet Explorer and Opera local zone restriction bypass Paul Szabo (Oct 31)