• info
• discussion
• exploit
• solution
• references

Macromedia Flash Player Arbitrary Local File Access Vulnerability

No exploit is required. An attacker does require control of a HTTP server, and some degree of technical knowledge may be needed.