How safe are *.swf files?

[snootalope]

At the moment, our business blocks all shockwave files that attempt to load on the internet. As you can imagine, this posses a problem occasionally with a legit site that uses a swf banner or whatever.

My question is, how safe are these swf files? Is there a possibility they could carry an embedded virus or some kind of spyware, malware, or whatever?

 

[electronicsfreak]

Any type of file in existence can carry a virus/trojan/spyware etc.. So really nothing is completely safe. Ive seen them included in flash, java, pictures, etc..

You might go about restricting sites except ones needed if possible or setting up user control policies if it hasnt been done already. Example like say normal users do not have permission on their accounts to install anything. That can help limit the amount of infections.

There is a point in wisdom and knowledge that when you reach it, you exceed what is considered possible - Jason Schoon

 

[Diancecht]

As, electronicfreak says, there are always security issues like this.

But IMHO and in the case of Flash, keeping the plugin up to date would throw them away to a reasonable level of security.

Personally, I hate flash so I would forbid it