Tracking Forums, Newsgroups, Maling Lists
Home Scripts Tutorials Tracker Forums
  Advanced Search
  HOME    TRACKER    Flash








Shockwave & Flash


Hi there,

If I have a shockwave file, can I import it into flash mx?

Is the size same as the shockwave? bigger or smaller?

tanks




FlashKit > Flash Help > Flash MX
Posted on: 07-24-2002, 09:44 AM


View Complete Forum Thread with Replies

Sponsored Links:

<b>FLASH</b> Vs <b>SHOCKWAVE</b>
wat da heck is the difference between flash and shockwave? looks to me like they're just different method of doing the same thing... but then again im just a lowly n00b

can someone tell me wat the advantage of each?

cheers,
P_T

View Replies !    View Related
Flash To Shockwave
Is there a way to export my .fla and import it to director?.. the main problem is that my .exe is too big (100 Mb) and sometimes it crashes when playing.. thanks in advanced..

View Replies !    View Related
Flash Vs. Shockwave
whats the difference between flash and shockwave?

View Replies !    View Related
Shockwave Flash NP-PPC And IE
I'm a Mac user using OS9.2.2 and a few months ago had to replace the hard drive on the Mac. This caused me to have to upgrade my flash player to Flash player 6. I had never had any problem surfing the net with Flash player 5. About an hour after I start up my computer I now keep getting this annoying error box that says,

Not enough memory to open the plug-in Shockwave flash NP-PPC. Allocating more memory to Internet Explorer may help.

I have allocated to IE the minimum memory to 3075488k and my perferred is 3259700k and that is the max memory my computer will allow me to allocate to IE and I still keep getting the annoying error box. Could anyone give me some ideas please? Oh yea I'm using IE 5.0

TIA

View Replies !    View Related
Shockwave Flash NP-PPC And IE
I'm a Mac user using OS9.2.2 and a few months ago had to replace the hard drive on the Mac. This caused me to have to upgrade my flash player to Flash player 6. I had never had any problem surfing the net with Flash player 5. About an hour after I start up my computer I now keep getting this annoying error box that says,

Not enough memory to open the plug-in Shockwave flash NP-PPC. Allocating more memory to Internet Explorer may help.

I have allocated to IE the minimum memory to 3075488k and my perferred is 3259700k and that is the max memory my computer will allow me to allocate to IE and I still keep getting the annoying error box. Could anyone give me some ideas please? Oh yea I'm using IE 5.0

TIA

View Replies !    View Related
Shockwave To Flash
Hello

I have an apllication writen in Shockwave, is there any way or software around to convert the apllication to flash?

Thanks!!

View Replies !    View Related
Shockwave Vs Flash?
what is the difference between shockwave and flash? They seem to be the same thing for the most part. Except that I've seen shockwave do more interesting things i think. Is shockwave better for developing games? If so, how do I make a shockwave file? Do you program shockwave files with actionscript?

Thanks in advance...

View Replies !    View Related
Flash = Shockwave?
what is the difference between flash and shockwave? cos i really dont see much difference. except flash is more popular than shockwave.. and now it seems flash and shockwave is combined 0_o?

View Replies !    View Related
Shockwave Or Flash
I read this on this website.
http://www.w3schools.com/flash/flash_howto.asp

In September 2000, NPD Research, the parent company of MediaMetrix, conducted a study to determine what percentage of Web browsers have Flash preinstalled. The results show that 96.4% of Web users can experience Macromedia Flash content without having to download and install a player.

If you do not have the Shockwave Player installed you can download it for free from Adobe's site.

Don't they mean if you do not have the Flash player installed?
Does Shockwave come preinstalled on computers?
If you visit a Shockwave web site will Shockwave install automatically?

Thanks.

View Replies !    View Related
Shockwave > Flash
Is it possible to convert a shockwave movie into flash???
Any secret program or anything???

View Replies !    View Related
Shockwave Vs Flash......
Im about to start developing an isometric walk around site
(like http://www.dubit.co.uk/ and http://www.mtv.co.uk/mtv.co.uk/en/dy.../microsite.htm)

Not sure if it should be done in shockwave or flash?? Most are in shockwave, any one know the main reasons why shockwave is used the most?

cheers,

m.

View Replies !    View Related
SHOCKWAVE Director 8 Vs FLASH 5 Or MX
Sorry I didn't make it clear... i meant SHOCKWAVE Director 8 vs FLASH 5...

What's the advantage of each?

View Replies !    View Related
Distributing Flash Via Shockwave
Help I'm distributing Flash player with a CD-ROM I believe you can only do this by distributing the Shockwave player which includes flash player.

So I went to macromedia site filled in licence I received the links to download Shockwave player v 8.5.1


However this only contains Flash Player v5,0,42,0 - which is no good as I am using MX so need to distribute flash player 6,0,47,0 (the newest one)

Does anyone know 1)is there a newer shockwave than v8.5.1 or is this the newest 2) Is it possible (legally) to distribute the flash player 6.exe instead of shockwave??



Any help greatly appreciated!!

View Replies !    View Related
Shockwave Studio Vs. Flash MX?
Hey,

I was checkin out Shockwave Studio and it looks alot like Flash cept for a few things. Anyone know about the main differences between the two?

View Replies !    View Related
Flash And Shockwave Files
Hello there,

I am trying to make an interactive presentation in Director, which contains sound, video and graphics....once I am done with animating some of the graphics, I need to bring parts of it into flash and export it as swf file ....I couldn't see that option (export to swf) in the export diologue box in director ,and in flash It didn't have export or import option for shock wave files....Is this even doable???......

I also was wondering if that was the best way of doing this...

Thank you for your help in advance.

View Replies !    View Related
Flash Player And Shockwave
I realise you need the flash player plugin installed to play flash files, but what is shockwave ?

Regards

Martin.

View Replies !    View Related
Can Shockwave Be Loaded Into Flash MX?
Hi every 1

I posted this question in the MX forum but got no reply, and it is a newbie question so im asking it hear 2,

Can Shockwave files be loaded into flash mx?

any reply on this will be much appriciated, thanks

View Replies !    View Related
Flash And Shockwave Versions?
Do Flash and Shockwave version corrolate? In other words, are Flash 5 and Shockwave 5 the samething?

View Replies !    View Related
Embed Shockwave In Flash
Hello people,
Is there anyway to embed shockwave content in flash/air?

Thank you
Murtaza Topiwalla

View Replies !    View Related
What Is The Difference Between Shockwave And Flash?
I know Flash is built from flash, and Shockwave from director. I know that Shockwave is compiled while Flash is interprited (right?), and I know that flash was designed specifically for the Web and Shockwave has been around much longer then that (and was designed for multimedia CD's right?)... But

What really is the difference between them at the technical level?

View Replies !    View Related
Compatability With Flash Shockwave 6.0 R79
I have currently been compliling emulators using flash. The emulators are published using action script 2.0 ver 6 for compatibility reasons. On computers that have upgraded the flash player to flash shockwave 6.0 r79, when the emulator opens it plays all the way through (ignors stop ();). By right clicking and selecting rewind the emulator goes to the begining and acts normally. Is there a fix for this? Do I need to change the publish settings. Most of the computers that view the emulator are formated with flash player 6.0. I do need the emulator to be compatible with both systems. Any assistance would be appreciated!

Thanks,

Tammy

View Replies !    View Related
Shockwave Flash Object SDK?
Can you tell me where I can download the SDK for Shockwave Flash Object, which is in file C:Windowssystem32MacromedFlashFlash9c.ocx?

Thanks.

View Replies !    View Related
[flash] Vrs. [director ] && Shockwave
i wnat to know the differencies betwen flash and director , and shockwave, which is faster for stad alone, which is easier to learn, all tha stuffs. i'm working in a interactive Cd and all i've made is in flash , and some times is slow.


thanks

View Replies !    View Related
View Flash Movie Without Shockwave
I want to show a Flash movie to somebody who does not have a flashplayer on their computer.

Apart from downloading it, is there any other way you can view a flashmovie? Like for example exporting it as an .exe?

Thanks

*************************
MERRY CHRISTMAS!

View Replies !    View Related
Downloading Flash Shockwave Files
Can Flash shockwave files be posted at a website in a configuration that does not allow the files to be downloaded, only looked at?

View Replies !    View Related
Shockwave+flash Players For Windows
i need to download the shockwave+the flash player 6 for a windows system but i work on a mac, and my pc does not have connection to the internet; the refered players for windows in macromedia site are all for instant INSTALL and not DOWNLOAD. i can't seem to find out how i can solve this.

any suggestion, please?

View Replies !    View Related
Flash X Shockwave: A Lost Battle?
Hey everybody,

There is a matter that have bugged me lately, and I confess that I am really confused about that, and I would like to hear some opinions about that.

I became a Flash game developer, and in the last year I may written about 50 games. Lately, I got a new customer from Malaysia that is a power developer (they makes and sell about two thousand games a year).

Talking to the person that is my contact there, I heard her tell me that they are predicting the death of Flash (not for everything, but for games development) in about one year. Second her sources in the company, Flash will be beated by Shockwave within this timeframe.

Well, talking to another customer, he told me what I always thought: that Flash is becoming more and more powerfull and that Adobe/Macromedia is going to slowly take Shockwave off because it's a too obsolete technology.

I know nothing about Shockwave development (dont know if exists a dev environment and such), but as far as I can see, Flash is getting better every new day, and it's very hard to me to believe that Shockwave can put Flash off of the competition.

What you guys think about that? What is truth and what is not in that?

View Replies !    View Related
Shockwave Player Interfering With Flash
i've encountered an issue where the loading bar on a Flash swf i created will only progress if you move the mouse or hit keys on the keyboard. on some systems, installing the latest version of the Flash player resolves this issue; on others, that doesn't help. the swf can be viewed at http://www.cafe-game-online.com (click on "Please Join us for a Game", or "Play Now" under the About Cafe menu option).

it's not a huge deal; most people wiggle their mouse when they're impatient anyway, so the problem sort of solves itself. still, any advice would be appreciated.

View Replies !    View Related
Making A Game Flash Or Shockwave?
I want to make my game as solid as possible... i know flash really well, but i know nothing about director besides they use a language called lingo...

i have heard that shockwave is more powerful, and more solid for games.. but i wanted to get someone elses opinion on the matter.

also, what are the multi-user possibilities of shockwave? i use electro-server for flash, but i don't know about shockwave...

thanks

View Replies !    View Related
(application/x-shockwave-flash-objekt)
I have this address: "www.laudes.nu" but if you go to the page youŽll see that the title is "(application/x-shockwave-flash-objekt)" which I donŽt like. It is also impossible to view the source code.

I have created a fla-file called index.fla, a swf-file called index.swf, and a html-file called index.html which has the title "Laudes - December" in the <head>. The swf-file and the html-file are on the webbserver.

Everything looks fine, except for the title, when I go to "www.laudes.nu". In order to see the correct title (and to be able to view the source code) I have to write: "www.laudes.nu/index.html".

Why and how do I solve the problem (I donŽt want to write "/index.html")????

View Replies !    View Related
Director Shockwave Loaded Into Flash?
Hi - what I want is to have my portfolio webpage as a _level0 .swf, and I'll load various things onto _level1 via loadMovieNum, as users click on their icons in my menu.

Oh yeah! I realized that not all the stuff in my portfolio is Flash-based. I have some Director 8.5 .dcr Shockwave files that I want to display within the same environment... ideally using loadMovieNum or something similar.

How can I integrate Director files into my online Flash environment?

View Replies !    View Related
IE Crashes With Shockwave Flash Object
Hallo,
my PC has win xp sp2, IE7.
When the add-on Shockwave flash object flash6.ocx is active,
IE crashes sporadically, but several times per hour.
When it is deactivated, IE works well.

Is there an update or other solution?
Thanks for help.

View Replies !    View Related
Shockwave Flash Object And Web Access?
Can you use Shockwave Flash Object on a Windows form and access the internet. I would like to know how to go about doing this? I want to like stream video files from the web.

View Replies !    View Related
Monitoring The Shockwave Flash Control
I have a VB6 app that uses the Shockwave Flash control, Flash8.ocx, to play a Flash SWF file. The SWF file loops continuously. Does the Shockwave Flash control have a property, method, or event that I can test from my VB6 app that can be used to indicate that the flash movie is continuing to run (maybe an indication of a current frame number, end-of-movie notification, current error number - which would normally be zero, etc.) ?

View Replies !    View Related
Macromedia Shockwave Flash ActiveX
How I can to capture frame from flash file to png without background and with considering semitransparency?

View Replies !    View Related
Recreating A Shockwave Effect In Flash
On the site www.dextro.org there is a shockwave effect that I really want to duplicate for my computer science class. On the main page, click on the little orange "C" in the bottom left, and on the page that loads find the animation in the sixth row, second column. The animation generates random points that randomly sized ellipses chase to-similar to an old Windows screen saver. If you watch the whole animation, it is perfectly symmetrical every time. However, I just want to know how to create the random chasing effect with the ellipses. Let me know if any of you have an easy answer for it, or if you have some code that comes close. Thanks for the help.

View Replies !    View Related
Shockwave Flash Changing Links
Someone made my logo out of ShockWave Flash. The problem is the URL embedded in the graphic is incorrect and I have to change it.

I have Swish 2.0. Is it possible to import this logo and change my link to the correct one. I tried to use the import but it keeps bringing it in as a sprite so the movie does not not work.

Any suggestions would be helpful??????????? thx

View Replies !    View Related
Looking For Shockwave Flash Bingo Game
I am looking for a Shockwave Flash Bingo game that I could integrate into a web site, sign up users and have multiplayer bingo games. Each user can have an amount of points and such.

For example:

http://www.bingoroom.com

Does anything like this exist that I can buy? How much would it be for someone to create something like this? Thanks.

View Replies !    View Related
Shockwave Flash Object - ActiveX Control
Hi,

I have a flash movie that loads variables from a .asp page.

This works fine on most machines that I test it on, however on some it does not.

It seems that whether or not this works depends on if the machine has the "Shockwave Flash Object" (this is an ActiveX control)installed.

This is extra to having "Flash" installed.

I want to put a link on my site where people can download the "Shockwave Flash Object" from but I can't find a link to this. Even if I download the latest version of Flash from the macromedia site my movie still does not work because the "Shockwave Flash Object" is missing.

Can anyone help???


Cheers

Dave

View Replies !    View Related
Controlling Flash/shockwave Images With An Object
afternoon lads n ladets,
I am playing with dreamweaver, and am trying to control a flash object with a roll over image.
Its easy to do http://www.members.aol.com/inferno2k11/newsite/
BUT i seem to be having trouble, i am receivin an error on the page. Thing is after AGES of trying I got it to work, and now its not... !?
The flash object is on a layer, on that page, what the hell could i be doing wrong!? PLZ HELP!

AOL AIM : inferno2k11
EMAIL : Inferno2k11@aol.com
ICQ : 103347859
MSN : wig_wearing_eagle@hotmail.com

View Replies !    View Related
Whats The Differance Shockwave/Flash Player
Its sonds dumb but, I thought the flash player and shockwave were kinda the same. Can you give me good example why you would use shockwave for games and flash player for games too.
What advan do you get, also I notices in Swish you export as shockwave.
Thanks PCRIDE

View Replies !    View Related
Stupid Question: What's The Difference Between FLASH And SHOCKWAVE?
I'm a little confused on this, but what IS the difference between Flash and Shockwave?

Thanks,

View Replies !    View Related
Any Way To Alter Application/x-shockwave-flash Content?
<object width="425" height="344"><param name="movie" value="myvideo"></param><param name="allowFullScreen" value="true"></param><embed src="myvideo" type="application/x-shockwave-flash" allowfullscreen="true" width="425" height="344"></embed></object>

I currently have an object that looks like this, however, I automatically pause the video for 5 seconds. I would like to be able to show a message after this 10 seconds. Is there a way to do this? Possiblly show something covering the video maybe? I would like the message to be contained within the video box. Is there a way to do this?

Any help/pointers/direction on where to go would be nice. Thank you.

View Replies !    View Related
Any Way To Alter Application/x-shockwave-flash Content?
<object width="425" height="344"><param name="movie" value="myvideo"></param><param name="allowFullScreen" value="true"></param><embed src="myvideo" type="application/x-shockwave-flash" allowfullscreen="true" width="425" height="344"></embed></object>

I currently have an object that looks like this, however, I automatically pause the video for 5 seconds. I would like to be able to show a message after this 10 seconds. Is there a way to do this? Possiblly show something covering the video maybe? I would like the message to be contained within the video box. Is there a way to do this?

Any help/pointers/direction on where to go would be nice. Thank you.

View Replies !    View Related
Help Help Swfs All Turned Into Shockwave Flash Objects
Started using flash 8 recently and everything was ok.

I tested and published my flas as swfs and html and all was fine.

Tonight, something's gone wrong. I imported a mp3 file into a flash document to work on and when i published it i couldn't view it.
All i've been doing is copying grouped objects from other my other flas and pasting them in frames in a flash movie to make a storyboard..

But when i published, it won't open and the properties thing says it's a shockwave flash object! The file ending is still called swf..

It gives me the message, "windows couldn't open this file
movie1.swf ....
choose the appropriate program from the list."

I can't recall which version of flash player i'm using, so i download flash 9 and also shockwave player although i'm only making the content in flash, not director, but i'm basically panicking, so

Plus flash player and shockwave do not appear on the list and i don't know where they get installed..

Where do they get installed?

What is going on?!

Of course, when i opened any folders i published animations to swf in previously, i find that the file type has changed to shockwave flash object!
i can't open any of them! i'm going to die... :( :(

Supposed to be uploading webpages this week and they were all ready .. now they are not going to work! And have other project deadline.. this is the worst thing.. i can't test anything.. :( :(

i'm really flummoxed. should i remove and reinstall flash?
i tried restarting and same thing still.

please please give me advice.. :(

View Replies !    View Related
How To Stop Flash Movie Through Shockwave Flash Extern API
Hello, everyone!

I'm trying to to play flash movie and stop playing from a c++ application useing IShockwaveFlash interface. A movie can any movie including url or local file. I've succeeded to start movie play buf totally failed to stop. Any of the stop functions (including TStop*) do no seem to work. Here the peace of code attached.

What am I doing wrong? Have I understood anything totally incorrect?
Any answer whould be creately appriciated.









Attach Code

#import "PROGID:ShockwaveFlash.ShockwaveFlash" raw_interfaces_only, no_namespace

typedef CWinTraits<WS_OVERLAPPEDWINDOW | WS_CLIPCHILDREN | WS_CLIPSIBLINGS, 0> CFlashHostWindowTraits;

class CFlashHostWindow : public CWindowImpl<CFlashHostWindow, CWindow, CFlashHostWindowTraits>
{
public:
DECLARE_WND_CLASS(_T("JDS_FLASH_WINDOW_CLASS"))

CFlashHostWindow()
{
}

BEGIN_MSG_MAP(TaskbarWindow)
MESSAGE_HANDLER(WM_CREATE, OnCreate)
MESSAGE_HANDLER(WM_DESTROY, OnDestroy)
MESSAGE_HANDLER(WM_COMMAND, OnCommand)
END_MSG_MAP()

LRESULT OnCreate(UINT, WPARAM, LPARAM, BOOL&)
{
RECT client_rect;
GetClientRect(&client_rect);

DWORD Style = WS_CHILD | WS_VISIBLE | WS_CLIPSIBLINGS | WS_CLIPCHILDREN;

_ControlWindow.Create(m_hWnd, client_rect, L"ShockwaveFlash.ShockwaveFlash", Style);
if (!_ControlWindow.IsWindow())
exit(0);

CComPtr<IShockwaveFlash> pFlash;
HRESULT hr = _ControlWindow.QueryControl<IShockwaveFlash>(&pFlash);
if (hr != S_OK)
exit(1);

//CComBSTR bstrMovie(L"http://xban.walla.co.il/banners/7/7/77105.swf");
CComBSTR bstrMovie(L"http://www.youtube.com/player2.swf?video_id=1G7Ll42IheA&l=277&t=OEgsToPDskLh4Fy8z6yXSM93r1mFuIJY&s=EC71CBEF1D1DDA58:53C662DC848F75CD");

hr = pFlash->put_Movie(bstrMovie);
return 0;
}

LRESULT OnDestroy(UINT, WPARAM, LPARAM, BOOL&)
{
::PostQuitMessage(0);
return 0;
}

LRESULT OnCommand(UINT, WPARAM wParam, LPARAM, BOOL&)
{
int MenuItem = LOWORD(wParam);
if (MenuItem == ID_FILE_STOP)
{
CComPtr<IShockwaveFlash> pFlash;
HRESULT hr = _ControlWindow.QueryControl<IShockwaveFlash>(&pFlash);
if (hr != S_OK)
exit(1);


/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
/// I've tried everything here, it does not seem to work, any help?
hr = pFlash->TStopPlay(bstrMovie);
hr = pFlash->Rewind();
hr = pFlash->Stop();
hr = pFlash->StopPlay();
hr = pFlash->Rewind();
hr = pFlash->put_FrameNum(0);
}
return 0;
}

private:
CAxWindow _ControlWindow;
};

View Replies !    View Related
Offline Rich Multimedia Presentation: Flash Or Shockwave?
I've just created a flash site for a doctor. He also wants an offline presentation that shows a 7-10 minutes film to be shown in a screen in his own practice.

I've always worked with flash; however, in order to move bigger graphics without any size limitations, should I migrate to Director?

thx guyz!

p$ I hope this is the correct forum, haven't been posting for ages!

View Replies !    View Related
Shockwave Flash - Visual Basic API (Scaling Problem)
Hi, I have a problem with the Shockwave Flash API in Visual Studio 6. When I place the API on the form you must create it to be the size you want it to be but it's done only once. Let's say you wanted to load different movies into the same API, you could use something like:


Code:
MyFlash.Movie = "C:movie.swf"
Which would switch the movie to be that of C:movie.swf - but let's say this application is more like a flash player and the user of it decides which movie to load and it can be any SWF from anywhere. They all have different stage heights and widths and loading it into the same sized box would either achieve a stretched or compressed flash movie or a piece of the flash (if allowscale is set to false inside the flash movie).

I tried using the following code to automatically adjust the API's height and width to be that of the flash movie's original (which didn't work):


Code:
Dim MovieHeight As Integer
Dim MovieWidth As Integer
MovieHeight = MyFlash.GetVariable("Stage.height")
MovieWidth = MyFlash.GetVariable("Stage.width")
MyFlash.Height = MovieHeight
MyFlash.Width = MovieWidth
(Please ignore the syntax errors if there are any there - my syntax was fine in my original code and I was just retying this from the top of my head.)

This didn't work because Stage.height is not a variable in the flash movie but more like a predefined constant and I don't think that the "GetVariable" function can handle this type of thing.

Does anyone have any suggestions/solutions for this problem? It's been really bugging me for a while and I can't figure out how to fix it.

Thanks in advance

View Replies !    View Related
How To Prevent Shockwave Flash File From Playing On Other Sites?
If someone REALLY wants to get to something, they can of course do it, but that shouldn't stop me from simple protection measures, should it? For example, if a thief really wants to steal your car, he can do it, but you'll still lock the doors everytime and probably even have a car alarm.




Anyway, here's what I want to do.

I want to somehow make my Flash file check to make sure that it's being played from a specific location (or domain if that's possible). If someone is trying to play the Flash file from their hard drive or from another site, I'd like it to execute: stop()

Any ideas on how I can go about doing this?

I am a newbie and English is my second language. Thank you.

View Replies !    View Related
Using Shockwave Files Created In Director In Flash Pages
I have made an interactive game in director and published it as a shockwave file, the only option I could find was in the form of a web page, I have made a flash website which links to this external web page, is it possible to import the file directly into my flash document?

Do I need another plugin for director to create a more adabtable file?

I want to burn my website and all links to CD for viewing offline by a third party what paths should I used to make the links from the CD?

thanks,
Mixadacat

View Replies !    View Related
VULNERABILITY ALERT: Macromedia Shockwave Flash Malformed Header Overflow
Macromedia Shockwave Flash Malformed Header Overflow

Release Date: August 8, 2002

Severity:
High (Remote Code Execution)

Systems Affected:
Macromedia Shockwave Flash - All Versions;
Unix and Windows; Netscape and Internet Explorer

Description:
While working on some pre-release eEye Retina CHAM tools, an exploitable
condition was discovered within the Shockwave Flash file format called SWF
(pronounced "SWIF").

Since this is a browser based bug, it makes it trivial to bypass firewalls
and attack the user at his desktop. Also, application browser bugs allow you
to target users based on the websites they visit, the newsgroups they read,
or the mailing lists they frequent. It is a "one button" push attack, and
using anonymous remailers or proxies for these attacks is possible.

This vulnerability has been proven to work with all versions of Macromedia
Flash on Windows and Unix, through IE and Netscape. It may be run wherever
Shockwave files may be displayed or attached, including: websites, email,
news postings, forums, Instant Messengers, and within applications utilizing
web-browsing functionality.

Technical Description:
The data header is roughly made out to:

[Flash signature][version (1)][File Length(A number of bytes too
short)][frame size (malformed)][Frame Rate (malformed)][Frame Count
(malformed)][Data]

By creating a malformed header we can supply more frame data than the
decoder is expecting. By supplying enough data we can overwrite a function
pointer address and redirect the flow of control to a specified location as
soon as this address is used. At the moment the overwritten address takes
control flow, an address pointing to a portion of our data is 8 bytes back
from the stack pointer. By using a relative jump we redirect flow into a
"call dword ptr [esp+N]", where N is the number of bytes from the stack
pointer. These "jump points" can be located in multiple loaded dll's. By
creating a simple tool using the debugging API and ReadMemory, you can
examine a process's virtual address space for useful data to help you with
your exploitation.

This is not to say other potentially vulnerable situations have not been
found in Macromedia's Flash. We discovered about seventeen others before we
ended our testing. We are working with Macromedia on these issues.

Protection:
Retina(R) Network Security Scanner already scans for this latest version of
Flash on users' systems. Ensure all users within your control upgrade their
systems.

Vendor Status:
Macromedia has released a patch for this vulnerability, available at:
http://www.macromedia.com/v1/handler...d=Full&Title=M
PSB02%2D09%20%2D%20Macromedia%20Flash%20Malformed% 20Header%20Vulnerability%2
0Issue&Cache=False

Discovery: Drew Copley
Exploitation: Riley Hassell

Greetings: Hacktivismo!, Centra Spike

Copyright (c) 1998-2002 eEye Digital Security
Permission is hereby granted for the redistribution of this alert
electronically. It is not to be edited in any way without express consent of
eEye. If you wish to reprint the whole or any part of this alert in any
other medium excluding electronic medium, please e-mail alert@eEye.com for
permission.

Disclaimer
The information within this paper may change without notice. Use of this
information constitutes acceptance for use in an AS IS condition. There are
NO warranties with regard to this information. In no event shall the author
be liable for any damages whatsoever arising out of or in connection with
the use or spread of this information. Any use of this information is at the
user's own risk.

Feedback
Please send suggestions, updates, and comments to:

eEye Digital Security
http://www.eEye.com
info@eEye.com

View Replies !    View Related
Copyright © 2005-08 www.BigResource.com, All rights reserved