Tuesday, April 12, 2011

CVE-2011-0611 Adobe Flash Zero Day embeded in DOC

information about new zero day in adobe flash player :

Filename: Disentangling Industrial Policy and Competition Policy.doc
Size:176,144 bytes

My analysis of  Disentangling Industrial Policy and Competition Policy.doc
File created 04-Apr-2011 9:50 , by user 7 , and company hust

There are no vulnerabilities in MS Office, there is a vulnerability in embeded swf as was described below.

embeded swf file(local name d:\513.swf)
size 10,421 bytes
decoded action  script

this is heap spray, allocate memory with nop slide=0x11111111.
and load second swf file.

second swf
size 1,484 bytes

SWFTools>swfdump.exe -D 1.swf
[HEADER]        File version: 10
[HEADER]        File size: 1484
[HEADER]        Frame rate: 24.000000
[HEADER]        Frame count: 1
[HEADER]        Movie width: 550.00
[HEADER]        Movie height: 400.00
[045]         4 FILEATTRIBUTES
[00c]      1447 DOACTION
GetU8() out of bounds: TagID = 12

flasm16win>flasm.exe -d 1.swf
movie '1.swf' // flash 10, total frames: 1, frame rate: 24 fps, 550x400 px
frame 0
00000000    push FALSE, 326943637, 326943739
0000000F    oldEquals
00000010    not
00000011    branchIfTrue label2 // offset 1100
00000016    branchIfTrue label1 // offset 24
0000001B    constants 'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', 'I'  Declared constant pool length 21 differs from calculated length 20

Disassembly may be incomplete: wrong action length encountered
          end // of frame 0

crash exist in Adobe Flash Player plugin .
in my test NPSWF32.dll (
crash at location 100cfc03

this possibly related to tweet :

call [0x11111110+0x08]
to be continue ...


  1. Wow! That's complicated! I'm getting a headache just looking at a couple lines of code. Your really good at coding it seems, so keep up the good work! What is Adobe? Thanks!

  2. I am trying this code, but sorry it's didn't work. Can you give me solution for this. Thanks for it.

  3. HI,
    Can you give me solution for this.I loved all of these posts. A lot of these things we have, but I got some really great ideas.

  4. This is my first time to go to here. I found a lot of appealing stuff in your blog.

  5. Thanks VILLY! I tried it and got some error. Please please help me...I really need it. I have to embed adobe flash in my doc very urgently. I will be very grateful to you.

  6. its nice post about the security thanks for providing such useful information actually there should be proper councling about the Security Course it provides a better security tricks along with to brighten someone's career.....

  7. This is very nice and informative post regarding to security. The C Company provides Security Industry Authority (SIA) registered training courses in Security Operations. This 4-day SIA Licence courses has been designed to meet not only the suggested requirements of today's Security Officer, but those of the future and therefore, we believe goes a step further than those of our competitive associates.

  8. This comment has been removed by the author.

  9. Your blogs are totally worth giving time and energy. vivint security

  10. Thanks for sharing this useful info. Keep updating same way for Adobe day CQ5.

    Regards,Siddu Corporate Training

  11. Its something looks like the machine code. I have learnt about that. Its really hard to understand and writing code too.

  12. Security is the one of the best thing which always give you a sense of Ultra security and protection against the internal as well as external factor
    home security service
    home security solution

  13. I got an intrest in your Blog. It gives me effective information on security systems . I am very impressed with your vast knowledge and insight. It is better than anything I've read in the editorial pages of the newspaper.

  14. i like your postings and knowledge for home security.in my opnion home security is a major part of our home that,s why their are n numbers of companies are involving in.
    So that security is based on alarm systems .

  15. Thank you very much!!!!!!!!!! Great help!!!
    Adobe Support

  16. Security contractor installs and helps monitor home security systems and commercial security systems with monitoring starting at just $14.95 Protection Concepts Atlanta security contractor Atlanta Security provider.

    Atlanta Home Security Systems

  17. EPG Security Group provides security services and protection to executives, high-profile individuals, and organizations from businesses to places of worship to the hospitality industry.
    Protection services MN

  18. Replacing batteries in smoke and carbon monoxide detectors is a simple task to provide protection for your family’s security. If you need help with a more sophisticated fire alarm system, give us a call, Lloyd Security can help provide the additional security you want for your home and family.
    Minneapolis 612.874.9295 | St.paul 651.646.0131 | Toll Free 800.330.0911
    Commercial Security Options

  19. Interesting and beautiful blog lovely presentation thanks for sharing your views.....
    Adobe Technical Support visit my site.....

  20. EPG Security Group has a reputation for effective security and executive protection solutions. EPG's vast experience in the public and private sector, including risk institutions, creates the foundation of risk mitigation and executive protection services.
    Executive Protection

  21. Lloyd Security installs, services, and monitors both residential and Commercial security systems in the Twin Cities.
    Minnetonka home security

  22. Our team of security professionals is here to assist you with any security need big or small. We offer security solutions for your home, business, or special event.
    EPG Security Group

  23. I’m definitely coming again to see these articles and blogs.
    adt security

  24. I am really appreciating very much by seeing your interesting posts.
    custom design security camera system

  25. It will be good and easier to understand to the people if it is written in words instead of coidng language.special event security

  26. This is the nice post and this post is really appreciable and informatics .I like this post too much.
    business security systems atlanta

  27. Thanks a lot for sharing us about this update. Hope you will not get tired on making posts as informative as this.
    hardsten keukenblad

  28. Kamera güvenlik sistemleri, kamera bilgi, alarm kurulumu fiyatları

  29. quality Resin Bound Driveways paths and patios, all technical information found at www.theresinbondedslabcompany.co.uk

  30. Support for adobe +1877-339-8403. Our highly knowledgeable Adobe technical support online staff is readily available at all times for our well- regarded clients to help out with their Adobe issues at the earliest possible time.

  31. W3 D Technologies is a pioneer in Dell Boomi Training sector, providing the Dell Boomi Online Training course we have experienced expert faculty for Dell Boomi

    Dell Boomi Online Training | Dell Boomi Certification Course

  32. We are offering Dell Boomi Online Training with latest techniques. Our experts have more than 8 years experienced and certified.
    Dell Boomi Online Training


  33. Such a very useful article. Very interesting to read this article.I would like to thank you for the efforts you had made for writing this awesome article.White marble flooring supplier


  34. This is a wonderful article, Given so much info in it, These type of articles keeps the users interest in the website, and keep on sharing more ... good luck.affordable luxury travel

  35. I really love the quality writing as offered on this post, cheers to the writer.Angel investment in India

  36. It's a great pleasure reading your post.It's full of information I am looking for and I love to post a comment that "The content of your post is awesome" Great work. Words Doctorate is providing PhD-Master Thesis and Research related support for PhD Students-all stream.

  37. its very useful blog i appreciate it if you know more information call our Adobe Help Number0800-098-8312

  38. Great blog! I really love how it is easy on my eyes and the information is well written. I am wondering how I might be notified whenever a new post has been made. I have subscribed to your feed which really should do the trick! Have a nice day! Adobe Contact Number UK

  39. Thank you very much! Your blog is always full of great idea. They are really helpful
    thank..! really useful information..
    Adobe Help Number +1-844-442-0111
    Adobe Phone Number

  40. Thank you very much. for giving excellent blog.
    it is a very useful blog.

  41. This comment has been removed by the author.

  42. I just read your comment such a very nice.
    About the oracle hcm topics and really worth reading good points were stated in the blog for more information can visit.

  43. Hi,
    This is a nice post about the security thanks for providing such useful information actually there should be proper counseling about the Security Course .Keep updating this kind of articles

  44. This comment has been removed by the author.

  45. This comment has been removed by the author.

  46. This post is very well written and also well formatted. Impressive!Thanks for the posting this blog............
    Oracle R12 Financials Online Training

  47. This research is practically done by you and gives good ideas.
    visit here some useful content here
    Adobe Helpline Number USA+1-844-442-0111
    Adobe support Number USA

  48. very informative article.And very well explained about different protocols.
    keep posting like good content posts.
    Oracle Fusion Training Institute

  49. This comment has been removed by the author.

  50. Very Useful content. Thank you for sharing.
    We provide the best technical support for Dell Printer get in touch with Dell Printer Support Number UK & Dell Printer Contact Number UK for instant help

  51. Such a very useful article. Very interesting to read this article.I would like to thank you for the efforts.
    Adobe Customer care Number

  52. This comment has been removed by the author.

  53. Hey, very nice information. Adobe Online Support UK provides the best tech support for Adobe technical issues.

  54. Very Nice Post. I congratulate with your blog. Thanks for sharing. You can also publish this excellent post on other platforms such as,
    corel 2017 keygen
    edius 8 full crack

  55. Hi,
    this is informative post.thanks for sharing such a nice topic.
    oracle fusion HCM online training.

  56. Thank a lot for this post that was very interesting. Keep posting like those amazing posts, this is really awesome
    McAfee Support Number UK 0800-756-3354

  57. This comment has been removed by the author.

  58. Accomplishing your daily works with the help of Adobe Application on your computer, but technical issue are still found in during its use, so you must talk to the technical experts at 0800-090-3220 to get an accurate solution. Adobe Helpline Number UK

  59. Thanks for sharing nice information with us. We provide the best customer support for Adobe Helpline Number UK and Adobe Phone Number UK.

  60. I really enjoyed reading this post.Call us at 0800-090-3240 Microsoft Support Number UK and Microsoft Helpline Number UK to get quick and satisfied solution.

  61. Very excellent blog it's very useful blog.Thanks for sharing us. Call us at Microsoft Support Number UK and Microsoft Helpline Number UK to get quick and satisfied solution.

  62. Get instant solution for your Norton Antivirus software.
    thanks really great information.
    Norton Support Number UK 0800-029-4639

  63. So many useful information in your blog. Thanks for sharing
    Adobe Phone Number UK and Adobe Customer Care Number UK

  64. Nice This Blog,
    Without a printer, we hardly able to fulfill our daily requirements of office work and Lexmark is that which offers affordable printers. Even so, tech issues are making the users problematic and to encounter with that, you must talk to the technicians at 0800-090-3240. LEXMARK Printer Helpline Number UK

  65. Not able to use some tools of Adobe application properly. At this time, you need to contact the technicians at 0800-090-3220 to get the proper resolution of the issue in a short time. Adobe Customer Care Number UK


  66. Thanks for sharing nice information with us. Call us at 0800-368-6133 Kaspersky Support Number UK and Kaspersky Helpline Number UK get quick and satisfied solution.

  67. Very elaborated and useful information.
    I have subscribed the RSS of the website to get regular updates.
    Informatica MDM Training
    Thanks for sharing such a useful information.