Description
Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file.
References
- 37870 vdb-entry
- 20100120 Secunia Research: Adobe Shockwave Player 3D Model Buffer Overflow mailing-list
- 37888 third-party-advisory
- shockwave-3d-bo(55758) vdb-entry
- 1023481 vdb-entry
- oval:org.mitre.oval:def:8311 vdb-entry signature
- ADV-2010-0171 vdb-entry
- http://secunia.com/secunia_research/2009-61/
- http://www.adobe.com/support/security/bulletins/apsb10-03.html