Tuesday, April 12, 2011

CVE-2011-0611 Adobe Flash Zero Day embeded in DOC

information about new zero day in adobe flash player :
http://contagiodump.blogspot.com/2011/04/apr-8-cve-2011-0611-flash-player-zero.html
http://www.adobe.com/support/security/advisories/apsa11-02.html

Filename: Disentangling Industrial Policy and Competition Policy.doc
Size:176,144 bytes


My analysis of  Disentangling Industrial Policy and Competition Policy.doc
 
File created 04-Apr-2011 9:50 , by user 7 , and company hust

There are no vulnerabilities in MS Office, there is a vulnerability in embeded swf as was described below.


embeded swf file(local name d:\513.swf)
size 10,421 bytes
decoded action  script


this is heap spray, allocate memory with nop slide=0x11111111.
and load second swf file.

second swf
size 1,484 bytes


SWFTools>swfdump.exe -D 1.swf
[HEADER]        File version: 10
[HEADER]        File size: 1484
[HEADER]        Frame rate: 24.000000
[HEADER]        Frame count: 1
[HEADER]        Movie width: 550.00
[HEADER]        Movie height: 400.00
[045]         4 FILEATTRIBUTES
[00c]      1447 DOACTION
GetU8() out of bounds: TagID = 12

flasm16win>flasm.exe -d 1.swf
movie '1.swf' // flash 10, total frames: 1, frame rate: 24 fps, 550x400 px
frame 0
00000000    push FALSE, 326943637, 326943739
0000000F    oldEquals
00000010    not
00000011    branchIfTrue label2 // offset 1100
00000016    branchIfTrue label1 // offset 24
0000001B    constants 'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', 'I'  Declared constant pool length 21 differs from calculated length 20

Disassembly may be incomplete: wrong action length encountered
          end // of frame 0
end

crash exist in Adobe Flash Player plugin .
in my test NPSWF32.dll (10.2.153.1)
crash at location 100cfc03


this possibly related to tweet :
Yuange

call [0x11111110+0x08]
to be continue ...

105 comments:

  1. Wow! That's complicated! I'm getting a headache just looking at a couple lines of code. Your really good at coding it seems, so keep up the good work! What is Adobe? Thanks!

    ReplyDelete
  2. I am trying this code, but sorry it's didn't work. Can you give me solution for this. Thanks for it.

    ReplyDelete
  3. HI,
    Can you give me solution for this.I loved all of these posts. A lot of these things we have, but I got some really great ideas.

    ReplyDelete
  4. This is my first time to go to here. I found a lot of appealing stuff in your blog.

    ReplyDelete
  5. Thanks VILLY! I tried it and got some error. Please please help me...I really need it. I have to embed adobe flash in my doc very urgently. I will be very grateful to you.

    ReplyDelete
  6. its nice post about the security thanks for providing such useful information actually there should be proper councling about the Security Course it provides a better security tricks along with to brighten someone's career.....

    ReplyDelete
  7. This is very nice and informative post regarding to security. The C Company provides Security Industry Authority (SIA) registered training courses in Security Operations. This 4-day SIA Licence courses has been designed to meet not only the suggested requirements of today's Security Officer, but those of the future and therefore, we believe goes a step further than those of our competitive associates.

    ReplyDelete
  8. This comment has been removed by the author.

    ReplyDelete
  9. Your blogs are totally worth giving time and energy. vivint security

    ReplyDelete
  10. Thanks for sharing this useful info. Keep updating same way for Adobe day CQ5.

    Regards,Siddu Corporate Training

    ReplyDelete
  11. Its something looks like the machine code. I have learnt about that. Its really hard to understand and writing code too.

    ReplyDelete
  12. Security is the one of the best thing which always give you a sense of Ultra security and protection against the internal as well as external factor
    home security service
    home security solution

    ReplyDelete
  13. I got an intrest in your Blog. It gives me effective information on security systems . I am very impressed with your vast knowledge and insight. It is better than anything I've read in the editorial pages of the newspaper.

    ReplyDelete
  14. i like your postings and knowledge for home security.in my opnion home security is a major part of our home that,s why their are n numbers of companies are involving in.
    So that security is based on alarm systems .

    ReplyDelete
  15. Thank you very much!!!!!!!!!! Great help!!!
    Adobe Support

    ReplyDelete
  16. Security contractor installs and helps monitor home security systems and commercial security systems with monitoring starting at just $14.95 Protection Concepts Atlanta security contractor Atlanta Security provider.

    Atlanta Home Security Systems

    ReplyDelete
  17. EPG Security Group provides security services and protection to executives, high-profile individuals, and organizations from businesses to places of worship to the hospitality industry.
    Protection services MN

    ReplyDelete
  18. Replacing batteries in smoke and carbon monoxide detectors is a simple task to provide protection for your family’s security. If you need help with a more sophisticated fire alarm system, give us a call, Lloyd Security can help provide the additional security you want for your home and family.
    Minneapolis 612.874.9295 | St.paul 651.646.0131 | Toll Free 800.330.0911
    Commercial Security Options

    ReplyDelete
  19. Interesting and beautiful blog lovely presentation thanks for sharing your views.....
    Adobe Technical Support visit my site.....




    ReplyDelete
  20. EPG Security Group has a reputation for effective security and executive protection solutions. EPG's vast experience in the public and private sector, including risk institutions, creates the foundation of risk mitigation and executive protection services.
    Executive Protection

    ReplyDelete
  21. Lloyd Security installs, services, and monitors both residential and Commercial security systems in the Twin Cities.
    Minnetonka home security

    ReplyDelete
  22. Our team of security professionals is here to assist you with any security need big or small. We offer security solutions for your home, business, or special event.
    EPG Security Group

    ReplyDelete
  23. I’m definitely coming again to see these articles and blogs.
    adt security

    ReplyDelete
  24. I am really appreciating very much by seeing your interesting posts.
    custom design security camera system

    ReplyDelete
  25. It will be good and easier to understand to the people if it is written in words instead of coidng language.special event security

    ReplyDelete
  26. This is the nice post and this post is really appreciable and informatics .I like this post too much.
    business security systems atlanta

    ReplyDelete
  27. Thanks a lot for sharing us about this update. Hope you will not get tired on making posts as informative as this.
    hardsten keukenblad

    ReplyDelete
  28. Kamera güvenlik sistemleri, kamera bilgi, alarm kurulumu fiyatları

    ReplyDelete
  29. quality Resin Bound Driveways paths and patios, all technical information found at www.theresinbondedslabcompany.co.uk

    ReplyDelete
  30. Support for adobe +1877-339-8403. Our highly knowledgeable Adobe technical support online staff is readily available at all times for our well- regarded clients to help out with their Adobe issues at the earliest possible time.

    ReplyDelete
  31. W3 D Technologies is a pioneer in Dell Boomi Training sector, providing the Dell Boomi Online Training course we have experienced expert faculty for Dell Boomi

    Dell Boomi Online Training | Dell Boomi Certification Course

    ReplyDelete
  32. We are offering Dell Boomi Online Training with latest techniques. Our experts have more than 8 years experienced and certified.
    Dell Boomi Online Training

    ReplyDelete

  33. Such a very useful article. Very interesting to read this article.I would like to thank you for the efforts you had made for writing this awesome article.White marble flooring supplier

    ReplyDelete

  34. This is a wonderful article, Given so much info in it, These type of articles keeps the users interest in the website, and keep on sharing more ... good luck.affordable luxury travel

    ReplyDelete
  35. I really love the quality writing as offered on this post, cheers to the writer.Angel investment in India

    ReplyDelete
  36. It's a great pleasure reading your post.It's full of information I am looking for and I love to post a comment that "The content of your post is awesome" Great work. Words Doctorate is providing PhD-Master Thesis and Research related support for PhD Students-all stream.

    ReplyDelete
  37. its very useful blog i appreciate it if you know more information call our Adobe Help Number0800-098-8312

    ReplyDelete
  38. Great blog! I really love how it is easy on my eyes and the information is well written. I am wondering how I might be notified whenever a new post has been made. I have subscribed to your feed which really should do the trick! Have a nice day! Adobe Contact Number UK

    ReplyDelete
  39. Thank you very much! Your blog is always full of great idea. They are really helpful
    thank..! really useful information..
    Adobe Help Number +1-844-442-0111
    Adobe Phone Number

    ReplyDelete
  40. Thank you very much. for giving excellent blog.
    it is a very useful blog.

    ReplyDelete
  41. This comment has been removed by the author.

    ReplyDelete
  42. I just read your comment such a very nice.
    About the oracle hcm topics and really worth reading good points were stated in the blog for more information can visit.

    ReplyDelete
  43. Hi,
    This is a nice post about the security thanks for providing such useful information actually there should be proper counseling about the Security Course .Keep updating this kind of articles

    ReplyDelete
  44. This comment has been removed by the author.

    ReplyDelete
  45. This comment has been removed by the author.

    ReplyDelete
  46. This post is very well written and also well formatted. Impressive!Thanks for the posting this blog............
    Oracle R12 Financials Online Training

    ReplyDelete
  47. This research is practically done by you and gives good ideas.
    visit here some useful content here
    Adobe Helpline Number USA+1-844-442-0111
    Adobe support Number USA

    ReplyDelete
  48. very informative article.And very well explained about different protocols.
    keep posting like good content posts.
    Oracle Fusion Training Institute

    ReplyDelete
  49. This comment has been removed by the author.

    ReplyDelete
  50. Very Useful content. Thank you for sharing.
    We provide the best technical support for Dell Printer get in touch with Dell Printer Support Number UK & Dell Printer Contact Number UK for instant help

    ReplyDelete
  51. Such a very useful article. Very interesting to read this article.I would like to thank you for the efforts.
    Adobe Customer care Number

    ReplyDelete
  52. This comment has been removed by the author.

    ReplyDelete
  53. Hey, very nice information. Adobe Online Support UK provides the best tech support for Adobe technical issues.

    ReplyDelete
  54. Very Nice Post. I congratulate with your blog. Thanks for sharing. You can also publish this excellent post on other platforms such as,
    corel 2017 keygen
    7RwCrack
    edius 8 full crack

    ReplyDelete
  55. Hi,
    this is informative post.thanks for sharing such a nice topic.
    oracle fusion HCM online training.

    ReplyDelete
  56. Thank a lot for this post that was very interesting. Keep posting like those amazing posts, this is really awesome
    McAfee Support Number UK 0800-756-3354

    ReplyDelete
  57. This comment has been removed by the author.

    ReplyDelete
  58. Accomplishing your daily works with the help of Adobe Application on your computer, but technical issue are still found in during its use, so you must talk to the technical experts at 0800-090-3220 to get an accurate solution. Adobe Helpline Number UK

    ReplyDelete
  59. Thanks for sharing nice information with us. We provide the best customer support for Adobe Helpline Number UK and Adobe Phone Number UK.

    ReplyDelete
  60. I really enjoyed reading this post.Call us at 0800-090-3240 Microsoft Support Number UK and Microsoft Helpline Number UK to get quick and satisfied solution.

    ReplyDelete
  61. Very excellent blog it's very useful blog.Thanks for sharing us. Call us at Microsoft Support Number UK and Microsoft Helpline Number UK to get quick and satisfied solution.

    ReplyDelete
  62. Get instant solution for your Norton Antivirus software.
    thanks really great information.
    Norton Support Number UK 0800-029-4639

    ReplyDelete
  63. So many useful information in your blog. Thanks for sharing
    Adobe Phone Number UK and Adobe Customer Care Number UK

    ReplyDelete
  64. This comment has been removed by the author.

    ReplyDelete
  65. Not able to use some tools of Adobe application properly. At this time, you need to contact the technicians at 0800-090-3220 to get the proper resolution of the issue in a short time. Adobe Customer Care Number UK

    ReplyDelete


  66. Thanks for sharing nice information with us. Call us at 0800-368-6133 Kaspersky Support Number UK and Kaspersky Helpline Number UK get quick and satisfied solution.

    ReplyDelete
  67. Very elaborated and useful information.
    I have subscribed the RSS of the website to get regular updates.
    Informatica MDM Training
    Thanks for sharing such a useful information.

    ReplyDelete
  68. Nice Blog! Thanks for sharing nice information with us. This Blog is very helpful for Software customer. If you are getting any technical issues…Read More

    ReplyDelete
  69. Thanks for sharing nice information with us. We provide the best customer support for Adobe Support Number UK and Adobe Helpline Number UK.

    ReplyDelete
  70. Very good blog it's very useful blog.
    Thanks for sharing us. Call us at
    Canon Printer Support Number Uk 0808-178-2624

    ReplyDelete
  71. Nice Blog! Thanks for sharing nice information with us
    Brother Printer Support Number Uk 0808-178-2624

    ReplyDelete
  72. Nice Blog! If you need Software related solution then call at team …Click Here.

    ReplyDelete
  73. This comment has been removed by the author.

    ReplyDelete
  74. its nice post about the security thanks for providing such useful information actually there should be proper councling about the Security Course it provides a better security tricks
    http://www.igofusion.com/courses/oracle-fusion-financials-online-training

    ReplyDelete
  75. Canon Printer is made to meet the demand peaks with its ultimate print technology and high productivity print speed. Sometimes, it may results in some technical issues. Solve these issues with our great experts at Canon Printer Support Number UK & Canon Printer Contact Number UK

    ReplyDelete
  76. This is highly informatics, crisp and clear. I think that everything has been described in systematic manner so that reader could get maximum information and learn many things.
    Security Systems

    ReplyDelete
  77. For the best printing experience printer is the name that performs the best and for technical issues in it will be corrected by calling the experts at Brother Printer Support Number Uk 0808-178-2624

    ReplyDelete
  78. When you face problems in installing or re-installing Adobe, you can get in touch with our tech experts by one dial only at 0808-238-7544 Adobe Help Number UK.

    ReplyDelete
  79. Adobe earned the very title of best system software. It edits, converts and sign PDF files. If you come to face any difficulty while using Adobe, our technicians will guide you at +44-800-090-3220 Adobe Contact Number UK against any of these technical issue.

    ReplyDelete
  80. This comment has been removed by the author.

    ReplyDelete
  81. Very nice post. It’s a very useful and outstanding blog. Call us at Adobe Help Number UK and Adobe Support Number UK to get quick and satisfy solution.

    ReplyDelete
  82. Microsoft is a famous operating system across the population of UK. It is an advanced platform to suit your projects to build with. For any technical related errors, you an call our skilled technicians at Microsoft Helpline Number UK and Microsoft Help Number UK

    ReplyDelete
  83. Dell printers are multipurpose that comes print jam free and worth spending. If you are facing any issue in it, connect to us at any point of time at +1-866-569-8043 toll free number. We will serve you in every way possible.
    Dell Printer Support Number

    ReplyDelete
  84. Adobe earned the most title of best framework programming. It alters, changes over and signs PDF records. On the off chance that you come to confront any trouble while utilizing Adobe, our experts will control you at +44-800-090-3220 Adobe Help number UK against any of this specialized issue.

    ReplyDelete
  85. Nice post I really like it. Call us at Adobe Help Number UK and Adobe Support Number UK to get quick and satisfy solution.

    ReplyDelete
  86. I would like to thank you for the efforts you have made in writing this article. I am hoping the same best work from you in the future as well. Your write up is a fine example of it.For more details visit our website.
    Fusion SCM Course Fee Structure in Hyderabad

    ReplyDelete
  87. Very interesting stuff to read and to share, thanks for sharing such a good blog. Keep posting more blogs like this thank you.................get more information please
    Click Here.

    ReplyDelete
  88. Asus Router Customer Support the problem occurs again, just delete the current network from the list of your saved networks on your device and then reconnect it again.

    ReplyDelete
  89. Thanks for sharing this informative post with us, keep updating us.
    Cisco technical services

    ReplyDelete


  90. many people are facing problen in their d-link router they people can contact us we are here to provide the complete solution about the asusu router support.
    d-link router customer support

    ReplyDelete
  91. when yopu have face nay problem with asus router then contact us asus router customer service

    ReplyDelete