Novice question--wouldn't getting exploited require that I visit a site of ill-repute?
Or, alternatively, is there some cross-domain element that makes this a threat even if I'm just seeing Flash-based ads on CNN.com?
Or, alternatively, is there some cross-domain element that makes this a threat even if I'm just seeing Flash-based ads on CNN.com?
BTW, anyone else think serving flash-based banner ads from untrusted third parties given its track record is well, the height of irresponsability?