Adobe.Shockwave.Player.Dir.File.Memory.Corruption

Release Date May 13, 2010
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt to exploit a memory-corruption vulnerability in Adobe Shockwave Player. The vulnerability is caused by an error when the vulnerable software handles a "DIR" file that includes an invalid integer value. It can be exploited via a crafted ".dir" file, leading to remote code execution.
Affected Products Shockwave Player 11.5.6.606 and earlier versions for Windows and Macintosh
Recommended Actions Please refer to the vendor's web site for the suggested workaround: http://www.adobe.com/support/security/bulletins/apsb10-12.html
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2010-0130
Reference/s http://www.adobe.com/support/security/bulletins/apsb10-12.html http://www.securityfocus.com/bid/40084 (BugTraq)

Fortinet