Search:

• Home
• About
• AIR Central
• AS3 Libs
• Books
• Flex Central
• FotoBooth
• Guru’s
• ImageDropr
• Resources
• Syndicate

Calendar

Tag Cloud

360Flex acrobat ActionScript 3 adobemediaplayer ads air apple books bug certificate conference contest cookbook datagrid everythingflexairlib FABridge FileReference filestream flash flashplayer Flash Player flashplayer10 Flex flex4 flexbuilder flickr fotobooth google googlecode gumbo ImageDropR indexing InsideRIA ion+ iphone iSpy java max merapi microsoft SilverLight swf Thermo update framework updatemanager

Categories

Select Category 360Flex ActionScript 3 Adobe AIR Announcements Artemis/Merapi AS3VOGenerator BlazeDS Buzzword Cairngorm ColdFusion Adapter Components Eclipse everythingflexairlib flash catalyst Flash Player Flex Flex 2 Flex 3 (Moxie) Flex 4 Flex Builder Flex Tools flickr Frameworks Hall of Fame Hibernate IFBIN ImageDropR IndyFlex InsideRIA LiveCycleDS MAX 2007 MAX 2008 PaperVision3D question SilverLight Thermo Tutorials Uncategorized Web Pro Comm Challenge

Archives

Select Month November 2008 October 2008 September 2008 August 2008 July 2008 June 2008 May 2008 April 2008 March 2008 February 2008 January 2008 December 2007 November 2007 October 2007 September 2007 August 2007 July 2007 June 2007 May 2007 April 2007 March 2007 February 2007 January 2007 December 2006 November 2006 October 2006 September 2006 August 2006 July 2006 June 2006 May 2006 April 2006 March 2006 February 2006 January 2006 December 2005 November 2005 October 2005 September 2005 August 2005 July 2005 June 2005 May 2005 April 2005

Highest Rated

• AIR Update Framework (5 out of 5)
• Free Gauge Component (5 out of 5)
• FileReference.browse() Bit Me on the Ass Today (5 out of 5)

Most Viewed

• Happy Thanksgiving - 22,218 views
• Android and Flash Player? - 5,892 views
• Using Flash Player 10 within Flex Builder - 4,137 views

Recent Posts

• Using Encrypted SQLite database in AIR 1.5 (from the cookbook)
• Announcing FotoBooth 2 Pixel Bender Edition
• FotoBooth at MAX, viewer for the rest of us

Recent Comments

• cssflex on FotoBooth at MAX, viewer for the rest of us
• otomatik kapi on Apollo Cheat Sheets
• joe on Android and Flash Player?

Share this Site

InsideRIA

My Publications

Speaking Events

Associations

Archive for June 18th, 2008

Flex 3 HistoryManager Exploit?

Wednesday, June 18th, 2008

I was just reading this article this morning about an exploit in the historyFrame.html file of the Flex 3.01 SDK.
The article states that Flex 3.01 SDK contains this vulnerability and that the issue was fixed with the Flex 3.02 build. I downloaded build 3.0.2.2095 dated June 17, 2008 and compared the historyFrame.html and history.js files [...]

Entries (RSS) and Comments (RSS)