Flash Security

The Flash plugin is installed on over 98% of Internet accessible computers, but until recently Flash has not been widely been regarded as a threat to web security.

We discuss common Flash programming and deployment pitfalls that lead to web security issues such as information disclosure, cross site request forgery, and cross site scripting. We demonstrate how attackers find and exploit these issues, and most importantly, we present how developers and system administrators can prevent Flash based security issues on their websites.