{"image_url":null,"provider_name":"Hatena Blog","width":"100%","blog_title":"\u307b\u3080\u3089\u3061\u3083\u307b\u3080\u307b\u3080","author_url":"https://blog.hatena.ne.jp/t_ashula/","author_name":"t_ashula","categories":[],"type":"rich","published":"2013-09-11 02:22:31","title":"Flash LSO XSS \u306e\u304a\u8a71","height":"190","description":"3\u884c\u3067\u983c\u3080 swfobject.js \u9644\u5c5e\u306e ExpressInstall.swf \u3092 \u9069\u5f53\u306a\u5f15\u6570\u3067\u547c\u3073\u51fa\u3057\u3066 \u3059\u3063\u305f\u3082\u3093\u3060\u306e\u672b\u306b www.macromedia.com \u3067 alert \u3067\u305f\u3088\uff0e \u306f\u3058\u3081\u306b swfobject.js \u304c\u30a2\u30ec\u306a\u8a71 \u306e\u5ef6\u9577\u6226\u7684\u306a\u65b9\u5411\u3067 ExpressInstall \u306b\u7d61\u3093\u3067\u3053\u3046\u3044\u3046\u4e8b\u4f8b\u304c\u3042\u308a\u307e\u3057\u305f\u3068\u3044\u3046\u304a\u8a71\u3067\u3059\uff0e \u30a2\u30ec\u306a\u8a71\u306e\u6642\u306b\u306f\uff0c\u4e3b\u3068\u3057\u3066 \u300cswfobject.js \u3092\u4f7f\u3063\u3066 swf \u3092\u8a2d\u7f6e\u3057\u3066\u3044\u308b\u30da\u30fc\u30b8\u3067\uff0c\u4e0d\u9069\u5207\u306a\u4f7f\u3044\u65b9\u3092\u3057\u3066\u3057\u307e\u3046\u3068\u305d\u306e\u30c9\u30e1\u30a4\u30f3\u3067\u554f\u984c\u304c\u8d77\u304d\u307e\u3059\u300d\u3068\u3044\u3046\u8a71\u3067\u3057\u305f\u304c\uff0c\u4eca\u56de\u306f\uff0c\u300c\u4e0d\u9069\u5207\u306a expressInstall.swf ( autoUpdato\u2026","provider_url":"https://hatena.blog","url":"https://t-ashula.hateblo.jp/entry/2013/09/11/022231","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Ft-ashula.hateblo.jp%2Fentry%2F2013%2F09%2F11%2F022231\" title=\"Flash LSO XSS \u306e\u304a\u8a71 - \u307b\u3080\u3089\u3061\u3083\u307b\u3080\u307b\u3080\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","version":"1.0","blog_url":"https://t-ashula.hateblo.jp/"}