http://www.nsa.gov/ia/media_center/video/orlando2010/flash.shtmlAnyone heard of Cloudburst? It's demoed in the video above as a commercial exploit to break out of a VM to the host OS. I hadn't heard of it prior to this video, but it seems it was presented at BH '09 by Immunity and was included in CANVAS as of version 6.47. How did I miss t his?!
I'm curious, though, if there's other exploit code out there for this?