What makes Adobe Flash so vulnerable and how does Mozilla Shumway fix it?
Flash related malicious activity is due to malicious website right? Not in Adobe's software right? If so, how can Shumway replace the Flash nightmare??
Super User is a question and answer site for computer enthusiasts and power users. It only takes a minute to sign up.Sign up to join this community
Adobe Flash is not inherently vulnerable, however Adobe's implementation has had it fair share of severe exploits. My explanation for this is simply history. Flash has been around for a long time. Adobe took over Flash from Macromedia back in 2007, and Flash was already on its 9th version. Back in the early 2000's, security was not on anyone's feature list for software, they were trying to ship features that enhanced the product and made a better experience for their users. Security just wasn't a problem, so it was addressed. Fast forward 5-10 years, and now Flash is all over the Internet and installed in every browser. It makes for a huge attack surface, on a complex codebase. That is why.