Adobe.Shockwave.Player.Dir.Invalid.Value.Code.Execution

Release Date May 13, 2010
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a code-execution vulnerability in Adobe Shockwave Player. The vulnerability is caused by an error when the vulnerable software handles an invalid value in a .dir file. It allows a remote attacker to execute code via sending a crafted .dir file.
Affected Products Shockwave Player version 11.5.6.606
Recommended Actions Please refer to the vendor's web site for the suggested workaround: http://www.adobe.com/support/security/bulletins/apsb10-12.html
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2010-1284
Reference/s http://www.adobe.com/support/security/bulletins/apsb10-12.html http://www.securityfocus.com/bid/40091 (BugTraq)

Fortinet