0-day attacks exploiting Flash just got harder thanks to new defenses

[Chiefcrowe]

http://arstechnica.com/security/201...-flash-just-got-harder-thanks-to-new-defenses

 

[postmortemIA]

yep, new defense called "uninstall flash "

My quick and dirty summary of article: Flash now uses technique in memory allocation that reduces chance that buffer overflow will lead to an exploit.

 

[John Connor]

What's this Chrome?

 

[TheRyuu]

What's this Chrome?

What?

The heap partitioning is Chrome only right now but will be extended to all other Flash verions in next months regular update. The validation to Vector objects is in both right now. They both aim to make exploiting the Vector object stuff much harder.