Adobe.Shockwave.Player.tSAC.Chunk.Memory.Corruption

Release Date Aug 19, 2010
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a memory-corruption vulnerability in Adobe Shockwave Player. The vulnerability is caused by an error when the vulnerable software processes a tSAC chunk within an Adobe Director file. It allows an attacker to execute arbitrary code via enticing a user into loading a malicious Adobe Director file through a web page.
Affected Products Adobe Shockwave Player 11.5.7.609 and earlier versions for Windows and Macintosh
Recommended Actions Refer to the vendor's advisory: http://www.adobe.com/support/security/bulletins/apsb10-20.html
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2010-2875
Reference/s http://www.securityfocus.com/bid/42668 (BugTraq)

Fortinet