Adobe.Shockwave.Director.Josh.Chunk.Code.Execution

Release Date Aug 19, 2010
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a remote code-execution vulnerability in Adobe Shockwave Player. The vulnerability is caused by an error when the vulnerable software handles a specially crafted ".dir" file. It allows a remote attacker to execute arbitrary code.
Affected Products Adobe Shockwave Player 11.5.7.609 and earlier versions
Recommended Actions Upgrade to Adobe Shockwave Player 11.5.8.612: http://www.adobe.com/support/security/bulletins/apsb10-20.html
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2010-2871
Reference/s http://www.adobe.com/support/security/bulletins/apsb10-20.html

Fortinet