The latest update for Adobe Flash Player removes a security vulnerability, which could be leveraged to abuse JSONP endpoints by making a victim run arbitrary requests to high-profile exposed domains, accounts/books/maps.google.com among them, and leak sensitive data.
This could be done by using Rosetta Flash, a tool that converts a Flash file, which is binary, into one composed of just alphanumeric characters, making its interception more difficult. The utility achieves this by returning an e…
Comments are closed.
