Adobe is working on a new sandboxed version of the Flash Player browser
plugin for Firefox. The move will make it tougher to compromise a
system's security using malicious Shockwave Flash objects. The new
plugin for Firefox (and other browsers like Opera, which rely on the
common Netscape Plugin Wrapper model of browser plugins), will work
essentially similar to the Flash Player Google Chrome ships with, which
works in a "Protected Mode". When "sandboxed" Shockwave Flash objects in
webpages will work as separate processes, with much lower privileges
than the actual user, the user's machine environment will be kept
abstract to it. Adobe has already redesigned the browser plugin of its
Reader X (PDF viewer) to work this way, and hasn't seen a significant
successful exploit since November, last year.
Source: Adobe Asset Blog
No comments:
Post a Comment