Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
From: Matthew Dempsky (matthewmochimedia.com)
Date: Wed Mar 11 2009 - 12:30:49 CDT
On Wed, Oct 1, 2008 at 5:46 PM, Matthew Dempsky <matthewmochimedia.com> wrote:
> If a Flash 9 SWF loads two SWF files with different SWF version
> numbers from two distinct HTTP requests to the exact same URL
> (including query string arguments), then Adobe's Flash Player plug-in
> will try to dereference a null pointer. This issue affects at least
> versions 220.127.116.11, 18.104.22.168, 22.214.171.124, and 10.0.12.10 on Windows, OS
> X, and Linux.
As an update, this issue also affects 10.0.22.87 at least on Windows
and OS X. I've seen some Linux distributions (e.g., ) claim that
10.0.22.87 fixes this bug (aka CVE-2008-4546), but I think this is
You can easily reproduce this bug (i.e., crash your browser) by
visiting http://flashcrash.dempsky.org/. Be sure to tell your
friends: it can be the next Rick Roll.