Posted by Mauro Gentile on Mar 23
A few days ago me (@sneak_) and @_ikki gave a talk at the great Troopers
2015 conference about CVE-2011-2461.
2011??! Yes, you read it right: we love to analyze seasoned bugs.
This bug is still exploitable in modern web browsers, with the latest
Adobe Flash plug-in.
In the case you are interested in client-side security, then we suggest
you to take a look at:
http://blog.nibblesec.org/2015/03/the-old-is-new-again-cve-2011-2461-is.html
OR…