1SWF Nugget
2----------
3
4-- Overview --
5
6SWF Nugget is a Razorback Detection Nugget that scans Flash files collected by
7Razorback Collector Nuggets. SWF Nugget decompresses (as necessary) and
8parses Flash files to detect attacks exploiting known vulnerabilities.
9
10The scan results are sent back to Razorback Dispatcher to correlate with other
11Razorback Nuggets.
12
13-- Status --
14
15Currently, it detects the following malicious Flash file that exploits the
16following CVEs:
17
18CVE-2005-2628
19CVE-2006-0323
20CVE-2007-0071
21
22-- Future Work --
23
24* Include more detections
25* Research ActionScript interpretation
26* Implement embedded data extraction such as JPEG, PNG, GIF and send back to
27  Razorback Dispatcher
28
29
30
31
32
33
34