• @[email protected]
    link
    fedilink
    51 month ago

    Macromedia Flash Action Script was the first language I saw that could have a RCE vulnerability caused by null pointer dereference.

    Thank god HTML5 media killed Flash.

    • @chaospatternsOP
      link
      English
      51 month ago

      Flash isn’t dead yet.

      I just had to use it to connect to an ancient Siemens building automation system. Luckily we’re replacing it this year.

      • @Giooschi
        link
        English
        81 month ago

        FYI there is an open source reimplementation of Flash from scratch called Ruffle that should solve all the security issues that Flash had. It runs on WASM so it’s compatible with modern browsers. The New York Times is using it to bring back some old interactive/animated pages that relied on Flash.