Adobe Shockwave Player CVE-2010-1282 ATOM Size Denial of Service Vulnerability
BID:40088
Info
Adobe Shockwave Player CVE-2010-1282 ATOM Size Denial of Service Vulnerability
| Bugtraq ID: | 40088 |
| Class: | Design Error |
| CVE: |
CVE-2010-1282 |
| Remote: | Yes |
| Local: | No |
| Published: | May 11 2010 12:00AM |
| Updated: | May 12 2010 05:52PM |
| Credit: | Code Audit Labs |
| Vulnerable: |
Adobe Shockwave Player 11.5.6 .606 Adobe Shockwave Player 11.5.2 .606 Adobe Shockwave Player 11.5.2 .602 Adobe Shockwave Player 11.5.1 .601 Adobe Shockwave Player 11.5 .601 Adobe Shockwave Player 11.5 .600 Adobe Shockwave Player 11.5 .596 |
| Not Vulnerable: |
Adobe Shockwave Player 11.5.7 .609 |
Discussion
Adobe Shockwave Player CVE-2010-1282 ATOM Size Denial of Service Vulnerability
Adobe Shockwave Player is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to cause the affected application to consume excessive resources, resulting in a denial-of-service condition.
Adobe Shockwave Player 11.5.6.606 and prior are vulnerable.
NOTE: This issue was previously discussed in BID 40066 (Adobe Shockwave Player APSB10-12 Multiple Remote Vulnerabilities) but has been given its own record to better document it.
Adobe Shockwave Player is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to cause the affected application to consume excessive resources, resulting in a denial-of-service condition.
Adobe Shockwave Player 11.5.6.606 and prior are vulnerable.
NOTE: This issue was previously discussed in BID 40066 (Adobe Shockwave Player APSB10-12 Multiple Remote Vulnerabilities) but has been given its own record to better document it.
Exploit / POC
Adobe Shockwave Player CVE-2010-1282 ATOM Size Denial of Service Vulnerability
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Adobe Shockwave Player CVE-2010-1282 ATOM Size Denial of Service Vulnerability
Solution:
Updates are available; please see the references for details.
Solution:
Updates are available; please see the references for details.
References
Adobe Shockwave Player CVE-2010-1282 ATOM Size Denial of Service Vulnerability
References:
References:
- [CAL-20100204-1]Adobe Shockwave Player Director File Parsing ATOM size infinite (Code Audit Labs)
- Adobe Homepage (Adobe)
- Adobe Security Advisory APSB10-12 (Adobe)
- [CAL-20100204-1]Adobe Shockwave Player Director File Parsing ATOM size infinite (Code Audit Labs