>>3607902Flash viruses are very difficult to create but malware authors aim for the Flash platform because it can have huge returns due to how the content is presented to us in a browser.
The code loads and runs automatically from accessing a webpage, it can be embedded in some advert such that you don't even know that it has run.
BUT
Since these are so troublesome to craft you often need a LOT of extra components to tie the exploit together, sometimes these things are embedded in the page too.
Flash works within so many constraints because it aims to increase security which impacts development but gives the user peace of mind.
The SWF on its own will not be enough to perform some kind of exploit by itself due to the nature of the VM (virtual machine) that interprets the published bytecode.
Since most users run the SWF locally, it wouldn't have the extras it needs to exploit the system. Even if it did, it wouldn't be able to successfully communicate this information back.
ALSO
Once again, since these require so much effort to produce, nobody is going to waste their exploit on a local deployment.
The more users you hit at once the better, as such you'd publish to webpages, adverts etc.
Once the exploit is discovered by Adobe, and they do this for a living, it's useless. I don't think anybody would tie something to valuable in to this game.
