Vuln writeup: http://www.foregroundsecurity.com/MyBlog/flash-origin-policy-issues.html Press: http://www.scmagazineus.com/Researcher-finds-frighteningly-bad-Flash-flaw/article/157734/ Vendor response: http://blogs.adobe.com/asset/2009/11/flash_content_and_the_same-ori.html