RE: FLASH: Flash Security Issues (exec command)

[Mountain, Mike J]

this is the code


On (Press)

      FS Command ("exec",

"command.com"&Chr(9)&"/c"&Chr(9)&"echo"&Chr(9)&"text3="&TypeVar&">c:\content

.txt")

      Go to and Play ("DELAY")

End On


as you can see it executes the command com and uses it to generate a file,

in this case called content.txt...but that could be runme.bat if you so

wished.


Mike M

++ -----Original Message-----

+

+ From: Matt Wobensmith [mwobensmithmacromedia [dot] com (mailto:mwobensmithmacromedia [dot] com)]

++ Sent: 10 May 2000 18:39

+

+ To: flasherchinwag [dot] com

++ Subject: Re: FLASH: Flash Security Issues (exec command)

++ 

++ 

++ Hi Mike -

++ 

++ You wrote:

++ 

++ >I downloaded a recent movie off Flashkit which uses the 

++ exec command to

++ >create a text file (or any other kind of file) on your directory C:

++ 

++ I haven't seen this sample, but I should point out that the 

++ Flash FSCommand

++ in a projector only opens an existing application. It does 

++ not create files

++ by itself. It can be used to open a .bat file - which could 

++ cause problems,

++ for sure - but the Flash movie alone does not have any real 

++ power to do

++ anything except open another executable.

++ 

++ In addition, SWF files embedded in an HTML page can't use 

++ the FSCommand to

++ do this.

++ 

++ If I missed the mark, let me know.

++ 

++ Matt

++ 

++ ---------------

++ Matt Wobensmith

++ Macromedia Tech Support

++ Flash Team Lead

++ 

++ flasher is generously supported by...

++ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

++  Get the last 100 messages from the flasher list NOW

++     http://www.chinwag.com/flasher/last100.shtml

++ 

++  Flash books http://www.chinwag.com/flasher/books.shtml

++ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

++ To unsubscribe or change your list settings go to

+

+ http://www.chinwag.com/flasher or email helpchinwag [dot] com

++ 


flasher is generously supported by...

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 Get the last 100 messages from the flasher list NOW

    http://www.chinwag.com/flasher/last100.shtml


 Flash books http://www.chinwag.com/flasher/books.shtml

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

To unsubscribe or change your list settings go to

http://www.chinwag.com/flasher or email

helpchinwag [dot] com