Description
Use-after-free vulnerability in an unspecified compatibility component in Adobe Shockwave Player before 11.5.9.620 allows user-assisted remote attackers to execute arbitrary code via a crafted web site, related to the Shockwave Settings window and an unloaded library. NOTE: some of these details are obtained from third party information.
References
- 68982 vdb-entry
- 42112 third-party-advisory
- ADV-2011-0335 vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb11-01.html
- 44617 vdb-entry
- 1025056 vdb-entry
- oval:org.mitre.oval:def:11548 vdb-entry signature
- adobe-shockwave-settings-code-execution(62978) vdb-entry