| Name | Adobe.Shockwave.Player.Dir.File.Parsing.Integer.Overflow |
| Alias/es | Adobe.Shockwave.Dir.File.Invalid.Field.Memory.Corruption |
| Last Updated Date | Jan 21, 2010 |
| Release Date | Jan 20, 2010 |
| Severity | Critical |
| Impact | System Compromise: Remote attackers can gain control of vulnerable systems. |
| Description | This indicates an attack attempt to exploit a remote code-execution vulnerability in Adobe Shockwave Player which could be exploited by opening a specially crafted ".dir" file. |
| Affected Products | Shockwave Player 11.5.2.602 and earlier versions for Windows and Macintosh |
| Recommended Actions | Refer to vendor's advisory for updates or patches:
http://www.adobe.com/support/security/bulletins/apsb10-03.html |
| Common Vulnerabilities and Exposures (CVE) | http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-4003
|
| Reference/s | http://www.adobe.com/support/security/bulletins/apsb10-03.html
|