Adobe Shockwave Player Director File Parsing Remote Code Execution Vulnerability

Bugtraq ID:	35469
Class:	Unknown
CVE:	CVE-2009-1860 CVE-2009-2186
Remote:	Yes
Local:	No
Published:	Jun 23 2009 12:00AM
Updated:	Jul 09 2009 08:36PM
Credit:	Paul Kurczaba via TippingPoint's Zero Day Initiative
Vulnerable:	Adobe Shockwave Player 11.5 .596
Not Vulnerable:	Adobe Shockwave Player 11.5 .600

Adobe Shockwave Player Director File Parsing Remote Code Execution Vulnerability

Adobe Shockwave Player is prone to a remote code-execution vulnerability caused by a memory-dereferencing error while parsing Adobe Director files.

Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts may cause a denial-of-service condition.

Versions prior to Shockwave Player 11.5.0.600 for Microsoft Windows are vulnerable.

Adobe Shockwave Player Director File Parsing Remote Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Shockwave Player Director File Parsing Remote Code Execution Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.

Adobe Shockwave Player Director File Parsing Remote Code Execution Vulnerability

References:

• Adobe Shockwave Player Homepage (Adobe)
  
• APSB09-08 Security Update available for Shockwave Player (Adobe)
  
• ZDI-09-044 Adobe Shockwave Player Director File Parsing Pointer Overwrite Vulner (Zero Day Initiative)