Description
Integer overflow in the Shockwave 3D Asset x32 component in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code via a crafted subrecord in a DEMX chunk, which triggers a heap-based buffer overflow.
References
- http://www.adobe.com/support/security/bulletins/apsb11-17.html
- TA11-166A third-party-advisory
- 20110614 Adobe Shockwave 3D Asset DEMX Integer Overflow Vulnerability third-party-advisory