Description
Multiple integer overflows in the allocator in the TextXtra.x32 module in Adobe Shockwave Player before 11.5.8.612 allow remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted (1) element count or (2) element size value in a file.
References
- 1024361 vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb10-20.html
- http://dvlabs.tippingpoint.com/advisory/TPTI-10-12
- 20100824 TPTI-10-12: Adobe Shockwave TextXtra Allocator Integer Overflow Remote Code Execution Vulnerability mailing-list
- oval:org.mitre.oval:def:11998 vdb-entry signature
- ADV-2010-2176 vdb-entry