From 58f2aa2c8e2c87d17eef378f357ddd77ba60f1c0 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Fr=C3=A9d=C3=A9ric=20Buclin?= Date: Tue, 13 Nov 2012 18:46:04 +0100 Subject: [PATCH] Bug 808845 (CVE-2012-5475): [SECURITY] Security vulnerability in YUI's swfstore.swf in YUI 2.8.2 and 2.9.0 a=LpSolit --- js/yui/swfstore/swfstore.swf | Bin 4879 -> 4841 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/js/yui/swfstore/swfstore.swf b/js/yui/swfstore/swfstore.swf index b2f5cd071e58ec7f1e5b54a60ab2cc967ebc9c8d..9c26ed13788c51ddd4b6d5bca27566289e18155b 100644 GIT binary patch literal 4841 zc-jH!5*F=4S5pg(9smG%+I?BsdmG1*?;6aYF#t#cBt?Sp@@q$R1 z5@a3{C7B`yzzhKkz`&RR56g)dZxknv9mjEOCvoD)j&nH9;lxgy%Xaq2?mD~K1;|h0 z`#$WqPx%+P)ja@6%GssdJ>AvS)zwwMs%m`B5|>WM#nYq_$cVp*5OTBb&p^njTwL#; z90@7Q=~Tw-$Js+|3Cqg%cXux>Ed`g31&!Q7ckjuQC%b$4y8HUNkfY07$yn-gSH?Wt zHoygpXl5*z%vwn!qp-OeHS*R&ZEYo~@mNJ@HlIszk?~l!meSH%#xlEmgS{vy9_!bQ zTw1jT)ND4DjHygq_i~q+Fk;u2)J3gJPpM|&RQDDm+hZlIlr}IJH=>#nN@>f=ab<98 zKj*et7;}6}(SdE(RN3xe%t&`eYO^ic&hszW0xrC zzX3Ah`ya_>VcoykvKCS0sV^L#c@78e8l49uOTzyPU z#que1=WsrkLk~=$F_;GITT}AGlxA570<#Wfo-^V}y%cE-1x&T^Ok7(I>s2X3jbAF; z%57xWbyJ$9d9tdNIHy{%gl1AB!|_mKWOm?#qMQrJR+H6oEYxQvC-{zrEgx<7ZxymX zqOFvSBAS>hnAX$DwB|7~6;SO;sODf?dm@jTj^J8`nci&N>A3!iauPR%$7W$>GUcHaOS6+eoZ++-VV)(XY$@zwC4@_Q zDsLueDT1oe4dJECg`9!jwN{+@EK6=8QWIhp`5ajz>r8RnI!%_yHD_F7$Pq0BxM-sD zt8i-uK{$d~FcwO=$6PTH%dRqzs>*{4YDP;{O@xOBC+4T7!;^z&M!i^5mdZe`PiE9l zp@ODSZ&dd9bV5^Nb~GsLXvNSK3u%~#l%%OxhM|~ggaD3|l3kT+jKM64SF-Hi4SaVw!9xRivJTu4|Qe!c6Ntd28(pBd6WbtU((F&jTbIVq;v=TQoQ^^>X!o?`I7-rrQ92F)J_nqJ_70PHGFI%UNe@d$6;kmF6@A zLrjB*UHJ@_Y&EN$W?+gNX^hn}jF=!Loku;>EYix*YBNiGLH7mZz$u>AuYlWQFY=kh zRRqml!Y2}C?!`Ecs<(*qqf^6Gl?66)XH{15(H&+LH;Wb@;m3LS%pRZpKeVkFG=X_m z!M7R)axRH5R4|^?NnX&*oqE$~&R8-rjTk5;Cs&HDXyx)+^*uG2E$|XQ&&t*W`XuE( zKRS)EJ2*WvC1do&S?)322%^$9HzV3f$6NB%BvMvn=Ft?ZBn}+Om>#lxs}yBDt1_%c z?A~5WLM&C;^@4^bW~RnQN5muxitE~n%Sgp}k#S|TB|eaNSSs*N#t>_9JA~ z7>lc%9qp*0#`l}s5?AREYUX)hd3d21<2lUD$Cp@UtGTD1RP87|{!bOEhQD3k{FUNd zuDULyOkpXG%N3Psu3a7Mx}tVH+0%70IM>+%3mBcIReufNYVBCIpIXo|9anJ?*F4(_ zxC_@fYW7_o91DkoOY9sghyiC8#Zu{SYJdj0!QWUXk%oqb1C2uxk;ravJr971PTrcA_a+plLDpS zqJoK%t95kU}?w9tyn_`Y0Tu(s3%CpwfL*x}Qo9Q0XLvekwgk z#Zy##h>8PLe3*)-DGXA1n8FB^N2wg5aE8Jdg>edJmKyCxM6Xc^H9|O4udeFHhZiS1k1Uc>fnqk*ff49Rz~VB<{mNJS{-Htw5@d;DK#GYTAMLI)L~)fz%!aQWpSH z--Txc@rZ6bp$AA~FOa4_AkD{s>^Tl(?+GCL?gO&_ejo=P0HT}(au9!jA8PW*F4F3J zkl|qT3=;4Pjv*p=9gY?v9EKVZNINv)MLW=HF4hpblf-s*Yfl0SI=U9M12JNHgy8~cJ&SeR>yTsqqXiN=E7SPVZ5XBfypb~{l^y?zXDEjVQNaG^(8oxNKqCh7~i zU%#whiOjzDN@p!1rK7l5dytU1*|W0*S=I`AUHB@jg&!lFb4|U1-|!qk!Qu|Vl7QCm z;H;R~RS2J83{Hv4?lm-!aw{e(tDX%Mre7O&Mn#h5d2HR^1}SZX1@W_C(x20n}g9~%iif%Puup1*8v3U6<2ez3WTqo{a{?)$7GmDHNLHo0EyUXJVVufq z{3y=5u1EApScCN!t&R2KuK(KHWa6rwlI*^pAKnG#-LhsCZ(gx`Muu z&^ID(uVLGdmvmqC+_g<&?_DqNE!un61L~Sm+}i7t@ZN3gCjM|cDFiOhkicUX$&8Sw z3q%70Gbry4$NFhFg6w`Mp%B5kVBIMqsn&sps%IcX#r?(BRo9!LIpz^ut7Fo6G@z7F zKdIe^NQegF+r>r_k)-~3_&WG@^To#l*8{0Q`u2>l#e-n4XAY_>^vqE^q*7-otWvJQ zF1F+?yDF3hq&0|6*_~%vZOmoPX2@#hPBG%rje_1C&I-kdtUpoEd->3<=L&is4kM;+ zq26nH{-w|&1eV`H6EUQ$wUCz0(2{^_Eo3dQ99jl8+gJ}Q-!AC8Z{LbZ#krNJban;8 zPcmJ1OOm_huNat@I`8&qpse0V3mUYg9rjql&#knRO+0C;K`{*)%-zr+1^QF^XU^UL zw!wE8G1{}%bA@znboLxgL!=R{b2D&V6Oiw-GXmOWp9@7sZU&x)&?>;KwAey6P>c}x zJm`_9F}`~cei~pXAGXiMMM?i0aykn*6tOu&Jpv0Z4UVK8J}h^AqQn2m=B7(zvQv&) z7pj5z#DR<;z(_4*+X4dvh!a!sN5>qx)xtVkpvrszX7llbhqJNh09K~rG1l0!v|PL;7w+q zg5KcYj~B8RzXgG};2o@;_VhJ-T949yfLPg8i^vba(>{qEm~uRQ8x2~B)Ruxo2z?ub zgda0cq)Pt|@}IQF;R~Yowekinzy} zdOrMJaPX+QjqkL>pK{6H$N~b3W*T|}2p-L9Tj{JsUExTg0quo*egZSVusN^m1uBku4zNr2b`*rna*hfY6=j2Z5XQ?fi%jA@Du~J_1gEA4BkZ;Eyol*h*nOKj-^dISnRCD zpC}z{{z++0nI<>&Kfq$`EXQ1lHSrKj!v6+=e}^G~$;JoJL!l2bOe7X2xL&A;NenRF z|ETb8tQYiw?Ysl1=@C&9rD6WW;OEsIXV1!wBCBxt6G_JUwx2Dn71vN?_#+Tl5&Lhu zh!xPRg%bAhAuI}_#O%rCAV@LU7ZDl*#qcUPkf9yz>G0t@<6~e3^~}P)L=)1h>evsr P%KvOUjg$WcJEN_slRjcC literal 4879 zc-jFE6Y%UqS5pd<9smG%+I?ARd|Sn}pK}+Dt|Z&?632G7o5YTn$V)azOfd1L*ujZ{ zm&6G;)|GUxB_inx-77By8kaWEQYcUgEiI)krKOZEP@r^$wshn5^;NQeNxr{N{nU@| z!~5cQX09aL(BE^I(af1MXU?4SKj+N-ks)q_kPD|s1CXKWMncH-+P?uIC$ll5cYG+Q zE~b)cs~2Z?x5jNd)7#y>u&~gzaHPx3&UGI;apFXG&*ARFhdYs@(^^W~+G1zg+TYs8 z1q|s{G@HoS2{Wy-xfU^V_T8&X3Xt$o!Q+nFAx({_7LP4=;uVH3W zn%$>mGRZ_#W8%6OJFU1Gy}F>y>zzhYv*IVaHyGI-J7FjFzW$gQ(bZs5UsR8%{Tur^ zx5L7iV;hS0ZMvq$c6UY1RCgw8#&S{A$v{zj^X4r~L?#zWCak!g?aQUFrp*QChz%;^ ziDq@pHn(z=Xly;HrRQ?moZdHlj<1#HTu05;`zG{^dgy3CJ=}As$5De(Pj-L8+C>UF zu#XJ+|0$j%gTmu4zkb;xqK94BMCs0E!v8+^&z9EXS3Rpl*6Gkgu3~- zbGr0-=23Z={rE;h!`ZBv<&&BTJ(|lV?4=EoD-?N9kJ_RZi@DC_QV~5{c}}+{Y|YMD zoT0*z8B181q_!mE%AD>lY44iIpg6rEX=<^HaU7xj?QL<*>W}FU9vofJk~tjK%r2D93MP{J zIW*fg3)Ml*I?F3v2z#%YE?>rt`$ug(#gCduJghT;qv@Ew7&6!?OiI69jiV_`A2d^$ ztZp&Im8D!Fl1;?s^h(5L*OC@D&90oCNGg}6MhEypRYuRUV3-;oJFD5zxG$@x%z2%i z)^Gb}6X}GV(2{s$%$w2dIOox=T0H8k8A}+&C}9q)wmx}0MXvL>sbbcOYgs+!xJz-I zlGbhC#3nMk8aq{vB3iOOc2Ty9k~M0kxj{XS97bZd9@EovcD!WekWsdB$f)1Yd-EA} zQ7swGB~jVITsDgU;kMkkvByj^^^-cnac+|W6*#$9Un;t=YBsm!nhjfR+grA+XZAsB zL`%n#de${-Ef}LiilwJx9GZ?5=C!QlL--DA$z()}UbT>qfwc1M=(*9eQ)g#KhDT42 zOjeYp7e|LCNA?yI&qmVepE%NexToii?no|?L`>Fg!F{g-^yaO^A?MdI%%F)0Ig!@0 zd$ux-rfof|MQwz>!?@%B5wdf01o!e=vUQG_tjzD_by%30EM;KH)}15}V@@uHn0J9G z>qvA*i&mD6WX_7yVxUxFkcJl0=d&h)*IshvGAy}CNR3Mw#ms2 zoGRG}6v;xTSK!t(2JaAp#GEVU9&5=$5V%W0Tu~aF*V1~jVk|V+KQ=ot85-|DJ?z7x zvQSC@b&0h0shmMms5dHmbTY21Q3q}+J6bgj)kYfTAvIyCwrQ$X3jL2GwP;uM3S+Q} z;?)d0ze_!jfnn)tBF!oR4j7L%uO*UNB&n+liI^Q%5p8N*Pt3(_ChqW|W0^&DQ9X3z zIR2VhHK}Fi^lX^6r-o#hHlwn9`K@tODW5Pr;MY$bjz05CUN@g zn9F9W*|N?8y|Rd;MMPg(OI8mT2ON%u7S-E~Tsq2>Z)?An)$Lq1jrUK-%!RI`>D;O- zp4E-J9+fcSlhxSFg-$IRMVE9MSu<5(ZBEqpl^m_|X)m{IIT@=lQ@7N#X{%g}>WE?H zEy7V{5^)bYvvj(`G7=X?GsuDWmFF=V#Uz$PJyDD{G$`I$)aUWa%({||w{?x{bHj@n zS4&%0M|%s+>IjCY4)?foX)M`VMnA>C6f;v8t0fpQ`D!YMdZt*Um7vvX75Tb6=aB=a zs6?*{9l)Bc`_QS_~;IcMzZFDg%NJz(OIRO zq9r?<(<`^8N)KD$)pwTFv@tYS(sOQj62q#0a%w_BV8>WmusrDB;x-Q>I{Cm?wA?sS zmK0{}B&#nXj^qg2reOSLxBymrSW(`-IsXS)7I8`{4USDsj0_J+35M6J`jXpB#(08v zr}YIska49RM*ja+{xAD$3zL_Qq+v;M<jnmrg$i|ay$mS zJg1NFbmQUUi!2FMeIoT&Y^f5}pQ#4Rmd1)KB=Oz z%3obmt0=JD)!=hC)`IKLKtZ4&QjjRf6kHT21veEuRPa*4N1=j36&3tctf5d##X2f) zqfk%f?Nn-@&`6~wD(|4Mlfo`4@1~MUVK0S!RNhaanL-Pd4^USdmD?$FQ28L00~9(b zbW!N0au214DIB42l)^D8-$CU&DIBM8f@qh%;OL?KJTqF__VQJAMNOMMH}w?uspQ+kcUBNQH`@EK(igx^?m`U_lww`#P%g@^VItk{ydFGn-so`OwZu(IsAPd+t;vt9hYCi_6=;`#P%}M zz6HuF0LlusR{`g*Vf!BLyG-HxID8%350LeT*xtnU3br3%`!TZo1aIY-eb~!j;wEEdl%b#*nWxa9c&Tm{S_|14a%>P^#jKGdu)FIDtrV~{3EtM zVf!=eK)`*BXZtgJNA~$D!H0h!g5YEP6~!aU z3Rg0!x7hJNp~|mF1lp>B)YkynS4)VO)B)ME4M=T05Oq6{rUoFMMj-Ac{Hoo9a3gzn z0;$*qq-HmeZF_)tRUpD%LiUmUKz23*scK=z9RSkM3Z$+LZPE^8M+YGXNdSne6NtYH zh};dNv4?RU0^&Oi1Y?2Fqd;~Y15$kl>U$@U?Z?rWCxGnkWsLj0ikq~!?m|t-N!HyB zq_vMJeGi^@im)pR{Y3By;s61kC^i#eKU7IT+F&1Ev>mPHR;u$oR|Z;cgEnxbzvW5L z`cE^<3X10y$oJ$&Nj_9frpU7QW+87J(FU>KsSRP@s10MkM+;(qNIQ*vt2ToDF>Mt4 zfOZD^JG6VTZ`Q`J@6^s>ze_uZ{WdLx{bB7q_6^#7*tcop*sIzE_FdW}_Q$oU^0-F3 zke}HXzIbLI#P{Zny@k*{aGHS(6pstFGNxeI*d!k z7+f+{JgaCR^+r@um%X=9m~o{LoQ0Y;LY#>aUadpuwvOZr!6Q)SS=GXU`=gS-o{&Ig zR4NnMKr4hIkS|1}wbfvqG~W@Gs}qFyG0qf+Z%qsPFP3KyhTHkBP?Y%lk?KbjM5L%I zaDT+rgt632{7vkX;tc#434S&b`~vIUt{s10Ul-n3Uw?mn9Y+xvZ%f&2o7mk;H&Qlk zG@>GhTaXk_GqXo<58Sx5T8+Zg5zew|gz=(l4rL8_6(()RW@(-cX)kbb9>$_@agFc- z61>cj+nhZbvXzfm#YG=;jizDD~t?VWpp-z$yT$&<*2QH8)AzmAZ1RADL z-c646yWs$`S3?nn2-Z3KW&uexA{wfWfe;n%D6}lQUk%PMkKkG@lg^_7r37n8%`QYj zBoNyyHXIKpj0Zzk!M~j^J{Y(fNCr|XQ^E!hg1wG8s5aj-L!FRHo}sWzxdz+VlCR{d zUz-q?=Auw~e&_o|V5 zJ~$77#W&GJ3@NM4qd+e)x>q_7SY%jtJ+s8vJB|AQp(T@H`2Dt)*+^r(y7}z+_ zgwxQnBD^L%3(tZ474BkmrR*ioqbo)7RdlgPUO=adWS5NA{_BRdm!}=$P8X5y*yKep zz6Liss`16t9{4t1K*$>{)w@vxXYuP0_zt{@#mP3CVT~-QTsn-!+#UD0t-Jm_-!C~G%H5Mv*NY+1MwF02<~|U zrho_5zu4(BAX(Ec9~l?I73hue+{!%#Kp`NrQBY--0Vbm`1@eI z4t3|adtEHaXg`4BP|)5e4MF>1X((!MmWGn{qtZ~;ehd!6UA%^sWd8)}8jJDqKCpU( zDY4AfI>HywYk^-lnQqG>ep0=JpGzzh6bu5Fmw7>%CO>5!sl=}!B6)qjx6v~ah(BX4 z^ZDLEpCR#GOn)MI58v)0QH70Sda0l#F^%nYVH!Kj3+AnY@pCZVhrso^HeMKi1A(_8 z@LS;YUtkzt4SWbw;zk0ejkbX9vrraq9i}U^nDs` zv3GhQehRUC%3v`Y@5>u~fxm$9Aqr%Z?I#_wRh<~R?4B5V9Emcsu7 z0)K-6fr-WE(_O*eW6a7dW^p}V785^-IvkK>NxsA%AY5L}8TRPBU10T(JzBB)?Pg1> zg;m@V`U40vA3@+Bz^5yLJgls)ggydbg)i?EzC4<-Pz*nOJWGNkx1s&GbgYAH|0??7 zkH9yEucL-}<76SU3?lNkp*clAK2`n%%%0w9*cIQ0^om;c?N|O^j`(dv{twhbp}zY( BXgdG^ -- 2.47.3