Description
Adobe Shockwave Player before 11.5.7.609 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted ATOM size in a .dir (aka Director) file.
References
- 40088 vdb-entry
- 20100512 [CAL-20100204-1]Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability mailing-list
- oval:org.mitre.oval:def:7388 vdb-entry signature
- 20100511 [CAL-20100204-1]Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability mailing-list
- http://www.adobe.com/support/security/bulletins/apsb10-12.html
- ADV-2010-1128 vdb-entry
- http://hi.baidu.com/fs_fx/blog/item/f8de1d18ba8c9b76dbb4bd56.html