Adobe Shockwave Player Director File Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	40082
Class:	Boundary Condition Error
CVE:	CVE-2010-0129
Remote:	Yes
Local:	No
Published:	May 11 2010 12:00AM
Updated:	May 12 2010 11:12AM
Credit:	Code Audit Labs and Alin Rad Pop of Secunia Research
Vulnerable:	Adobe Shockwave Player 11.5.6 .606 Adobe Shockwave Player 11.5.2 .606 Adobe Shockwave Player 11.5.2 .602 Adobe Shockwave Player 11.5.1 .601 Adobe Shockwave Player 11.5 .601 Adobe Shockwave Player 11.5 .600 Adobe Shockwave Player 11.5 .596
Not Vulnerable:	Adobe Shockwave Player 11.5.7 .609

Adobe Shockwave Player Director File Multiple Remote Code Execution Vulnerabilities

Adobe Shockwave Player is prone to multiple remote code-execution vulnerabilities while parsing Director (.dir) files.

Attackers can exploit these issues to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts may cause a denial-of-service condition.

Versions prior to Shockwave Player 11.5.7.609 are vulnerable.

Note: These issues were previously covered in BID 40066 (Adobe Shockwave Player APSB10-12 Multiple Remote Vulnerabilities); they have been given their own record to better document them.

Adobe Shockwave Player Director File Multiple Remote Code Execution Vulnerabilities

Currently we are not aware of any exploits for these issues. If you we are in error or if you are aware of any more recent information, please mail us at: [email protected].

Adobe Shockwave Player Director File Multiple Remote Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references for details.

Adobe Shockwave Player Director File Multiple Remote Code Execution Vulnerabilities

References:

• [CAL-20100204-2]Adobe Shockwave Player Director File Parsing integer overflow vu (Code Audit Labs)
  
• Adobe Security Advisory APSB10-12 (Adobe)
  
• Adobe Shockwave Player Homepage (Adobe)
  
• Secunia Research: Adobe Shockwave Player Array Indexing Vulnerability (Secunia)