This application requires Javascript for optimal performance.

Adobe.Shockwave.Player.Dir.File.Boundary.Error

Release Date

May 13, 2010

Severity

high

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Description

This indicates an attack attempt to exploit a memory-corruption vulnerability in Adobe Shockwave Player.

The vulnerability is caused by improper boundary checking when the vulnerable software handles a malicious "DIR" file. It can be exploited via a crafted ".dir" file, which may lead to remote code execution.

Affected Products

Shockwave Player 11.5.6.606 and earlier versions for Windows and Macintosh

Recommended Actions

Refer to the vendor's website for updates or patches:
http://www.adobe.com/support/security/bulletins/apsb10-12.html

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2010-0127

Reference/s

http://www.adobe.com/support/security/bulletins/apsb10-12.html

Reference: VID-22989