Adobe.Shockwave.Player.Dir.File.Signedness.Error

Release Date May 13, 2010
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt to exploit a memory-corruption vulnerability in Adobe Shockwave Player. The vulnerability is caused by a signedness error when the vulnerable software handles a malicious "DIR" file. It can be exploited via a crafted ".dir" file, leading to remote code execution.
Affected Products Adobe Shockwave Player 11.5.6.606 and earlier versions
Recommended Actions Please refer to the vendor's web site for updates or patches: http://www.adobe.com/support/security/bulletins/apsb10-12.html
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2010-0128
Reference/s http://www.adobe.com/support/security/bulletins/apsb10-12.html

Fortinet