Adobe Shockwave Player Active Template Library Remote Code Execution Vulnerability
BID:35845
Info
Adobe Shockwave Player Active Template Library Remote Code Execution Vulnerability
| Bugtraq ID: | 35845 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 28 2009 12:00AM |
| Updated: | Jul 31 2009 03:34PM |
| Credit: | David Dewey, Ryan Smith, and Microsoft |
| Vulnerable: |
Adobe Shockwave Player 11.5 .600 Adobe Shockwave Player 11.5 .596 Adobe Shockwave Player 10.2 .023 Adobe Shockwave Player 10 |
| Not Vulnerable: |
Adobe Shockwave Player 11.5 .601 |
Discussion
Adobe Shockwave Player Active Template Library Remote Code Execution Vulnerability
Adobe Shockwave Player is prone to a remote code-execution vulnerability because it was compiled against the Microsoft Active Template Library (ATL).
Remote attackers can exploit this issue to execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will likely result in a denial-of-service condition.
This issue is caused by the vulnerabilities described in Microsoft security advisory 973883 and is related to the following BIDs:
35828 Microsoft Visual Studio Active Template Library COM Object Remote Code Execution Vulnerability
35830 Microsoft Visual Studio Active Template Library NULL String Information Disclosure Vulnerability
35832 Microsoft Visual Studio ATL 'VariantClear()' Remote Code Execution Vulnerability
Adobe Shockwave Player is prone to a remote code-execution vulnerability because it was compiled against the Microsoft Active Template Library (ATL).
Remote attackers can exploit this issue to execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will likely result in a denial-of-service condition.
This issue is caused by the vulnerabilities described in Microsoft security advisory 973883 and is related to the following BIDs:
35828 Microsoft Visual Studio Active Template Library COM Object Remote Code Execution Vulnerability
35830 Microsoft Visual Studio Active Template Library NULL String Information Disclosure Vulnerability
35832 Microsoft Visual Studio ATL 'VariantClear()' Remote Code Execution Vulnerability
Exploit / POC
Adobe Shockwave Player Active Template Library Remote Code Execution Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Adobe Shockwave Player Active Template Library Remote Code Execution Vulnerability
Solution:
The vendor has released an advisory along with fixes. Please see the references for details.
Solution:
The vendor has released an advisory along with fixes. Please see the references for details.
References
Adobe Shockwave Player Active Template Library Remote Code Execution Vulnerability
References:
References:
- Attacking Interoperability (Mark Dowd, Ryan Smith, and David Dewey)
- Impact of Microsoft ATL vulnerability on Adobe Products (Adobe)
- APSB09-11 Security update available for Shockwave Player (Adobe)
- Microsoft Security Advisory (973882): Vulnerabilities in Microsoft Active Templa (Microsoft)
- Microsoft Security Bulletin MS09-034 (Microsoft)
- Microsoft Security Bulletin MS09-035 (Microsoft)