Macromedia Shockwave Player ActiveX Control Buffer Overflow Vulnerability

Bugtraq ID:	16791
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 23 2006 12:00AM
Updated:	Feb 24 2006 06:22PM
Credit:	Discovered by Peter Vreugdenhil.
Vulnerable:	Macromedia Shockwave 8.5.1 r106 Macromedia Shockwave 8.5.1 r105 Macromedia Shockwave 8.0 - Apple Mac OS 9 9.0 - Debian Linux 2.2 - Mandriva Linux Mandrake 7.2 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional - Redhat Linux 6.0 - Slackware Linux 7.1 - Sun Solaris 7.0 - Sun Solaris 2.6 - SuSE Linux 7.0 Macromedia Shockwave 6.0 Macromedia Shockwave 5.0 Macromedia Shockwave 4.0 Macromedia Shockwave 3.0 Macromedia Shockwave 2.0 Macromedia Shockwave 1.0 Macromedia Shockwave 10.1.0.11
Not Vulnerable:

Macromedia Shockwave Player ActiveX Control Buffer Overflow Vulnerability


Macromedia Shockwave Player is prone to a buffer overflow when a particular ActiveX control is passed malicious parameters. Attackers can exploit this vulnerability to crash the application or to potentially execute arbitrary code.


Macromedia Shockwave Player versions 10.1.0.11 and earlier are vulnerable.

Macromedia Shockwave Player ActiveX Control Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Macromedia Shockwave Player ActiveX Control Buffer Overflow Vulnerability

Solution:

This issue has been addressed by Adobe. Reportedly, no action needs to be taken by users to correct this vulnerability.

Macromedia Shockwave Player ActiveX Control Buffer Overflow Vulnerability

References:

• APSB06-02 Improper Memory Access Vulnerability in Shockwave Player ActiveX insta (Macromedia)