1SWF Nugget 2---------- 3 4-- Overview -- 5 6SWF Nugget is a Razorback Detection Nugget that scans Flash files collected by 7Razorback Collector Nuggets. SWF Nugget decompresses (as necessary) and 8parses Flash files to detect attacks exploiting known vulnerabilities. 9 10The scan results are sent back to Razorback Dispatcher to correlate with other 11Razorback Nuggets. 12 13-- Status -- 14 15Currently, it detects the following malicious Flash file that exploits the 16following CVEs: 17 18CVE-2005-2628 19CVE-2006-0323 20CVE-2007-0071 21 22-- Future Work -- 23 24* Include more detections 25* Research ActionScript interpretation 26* Implement embedded data extraction such as JPEG, PNG, GIF and send back to 27 Razorback Dispatcher 28 29 30 31 32 33 34