Are there any documented instances of being able to cause a buffer overrun
with a flash or shockwave file?

Has anyone heard of such a thing, reliably?

I know that preventive action is better than corrective... I am just curious
if this is a current or potential threat...

Michael E. Cummins



-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
Behalf Of Graham Wheeler
Sent: Friday, August 11, 2000 09:28
To: Marko Vukovic'
Cc: Michael E. Cummins; [EMAIL PROTECTED]
Subject: Re: Shockwave - A Question and an Answer


Marko Vukovic' wrote:
>
> Right you are, methinks it's a bandwidth issue again.
> AFAIK, shockwave is harmless from a security aspect.

Assuming it is properly implemented; in particular, assuming no buffer
overrun vulnerabilities.

--
Dr Graham Wheeler                        E-mail: [EMAIL PROTECTED]
Director, Research and Development       WWW:    http://www.cequrux.com
CEQURUX Technologies                     Phone:  +27(21)423-6065
Firewalls/VPN Specialists                Fax:    +27(21)424-3656

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to