Canonicalization issues in Adobe Macromedia Flash Player version 9.0 r31 allow for the manipulation of the cross domain policy file source.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/60838/adobe-cdpfr.txt
Source: https://packetstormsecurity.com/files/60838/adobe-cdpfr.txt.html