Release DateMay 13, 2010 |
Severityhigh |
ImpactSystem Compromise: Remote attackers can gain control of vulnerable systems. |
DescriptionThis indicates an attack attempt to exploit a memory-corruption vulnerability in Adobe Shockwave Player.The vulnerability is caused by improper boundary checking when the vulnerable software handles a malicious "DIR" file. It can be exploited via a crafted ".dir" file, which may lead to remote code execution. |
Affected ProductsShockwave Player 11.5.6.606 and earlier versions for Windows and Macintosh |
Recommended ActionsRefer to the vendor's website for updates or patches:http://www.adobe.com/support/security/bulletins/apsb10-12.html |
Coverage IPS
VCM |
Common Vulnerabilities and Exposures (CVE)CVE-2010-0127 |
Reference/shttp://www.adobe.com/support/security/bulletins/apsb10-12.html |