| Name | Adobe.Shockwave.Player.Dir.File.Parsing.Heap.Overflow |
| Alias/es | Adobe.Shockwave.Dir.File.Invalid.Pointer.Memory.Corruption |
| Release Date | Jan 20, 2010 |
| Severity | Critical |
| Impact | System Compromise: Remote attackers can gain control of vulnerable systems. |
| Description | This indicates an attack attempt to exploit a remote code-execution vulnerability in Adobe Shockwave Player.
The vulnerability is caused by an error when the vulnerable software handles a "DIR" file that includes an overly large integer value field. It can be exploited via a crafted ".dir" file, leading to remote code execution. |
| Affected Products | Shockwave Player 11.5.2.602 and earlier versions for Windows and Macintosh |
| Recommended Actions | Refer to the vendor's web site for suggested workaround.
http://www.adobe.com/support/security/bulletins/apsb10-03.html |
| Common Vulnerabilities and Exposures (CVE) | http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-4002
|
| Reference/s | http://www.adobe.com/support/security/bulletins/apsb10-03.html
|