Unscored CVE-2011-0557 EUVD-2011-0575GHSA-p2ww-36fq-xhvh

Integer overflow in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code via a Director movie with a …

Published Feb 10, 2011 · Updated Aug 6, 2024 · Assigned by adobe

Description

Integer overflow in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code via a Director movie with a large count value in 3D assets type 0xFFFFFF45 record, which triggers a "faulty allocation" and memory corruption.

References

shockwave-overflow-code-exec(65259) vdb-entry
ADV-2011-0335 vdb-entry
http://www.adobe.com/support/security/bulletins/apsb11-01.html
1025056 vdb-entry
46330 vdb-entry
20110208 ZDI-11-079: Adobe Shockwave Player 0xFFFFFF45 Record Count Element Remote Code Execution Vulnerability mailing-list