Description
Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir (aka Director) file that triggers an array index error.
References
- 38751 third-party-advisory
- 20100512 [CAL-20100204-2]Adobe Shockwave Player Director File Parsing integer overflow vulnerability mailing-list
- http://www.adobe.com/support/security/bulletins/apsb10-12.html
- 20100511 [CAL-20100204-2]Adobe Shockwave Player Director File Parsing integer overflow vulnerability mailing-list
- 40082 vdb-entry
- 20100511 Abobe Shockwave Player Heap Memory Indexing Vulnerability third-party-advisory
- ADV-2010-1128 vdb-entry
- http://secunia.com/secunia_research/2010-20/
- http://hi.baidu.com/fs_fx/blog/item/fa74a61705b5e24621a4e951.html
- 20100512 Secunia Research: Adobe Shockwave Player Array Indexing Vulnerability mailing-list
- oval:org.mitre.oval:def:7134 vdb-entry signature