@ye
Yes, Flash is sandboxed (when running in IE - not in Firefox or Chrome). But for whatever reason Adobe had designed their own broker process (instead of using the IE supplied one) - which furthermore had the capability to launch arbitrary programs. Go figure. A bug in this broker process combined with a Java bug was what was used in pwn2own.
The best of ZDNet, delivered
ZDNet Newsletters
Get the best of ZDNet delivered straight to your inbox
