Adobe Shockwave Player CVE-2010-2868 Multiple Remote Code Execution Vulnerabilities
BID:42676
Info
Adobe Shockwave Player CVE-2010-2868 Multiple Remote Code Execution Vulnerabilities
| Bugtraq ID: | 42676 |
| Class: | Unknown |
| CVE: |
CVE-2010-2868 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 24 2010 12:00AM |
| Updated: | Sep 01 2010 06:35PM |
| Credit: | Rodrigo Rubira Branco of Check Point |
| Vulnerable: |
Adobe Shockwave Player 11.5.7 .609 Adobe Shockwave Player 11.5.6 .606 Adobe Shockwave Player 11.5.2 .606 Adobe Shockwave Player 11.5.2 .602 Adobe Shockwave Player 11.5.1 .601 Adobe Shockwave Player 11.5 .601 Adobe Shockwave Player 11.5 .600 Adobe Shockwave Player 11.5 .596 |
| Not Vulnerable: |
Adobe Shockwave Player 11.5.8.612 |
Discussion
Adobe Shockwave Player CVE-2010-2868 Multiple Remote Code Execution Vulnerabilities
Adobe Shockwave Player is prone to multiple remote code-execution vulnerabilities.
Very few technical details are currently available. We will update this BID as more information emerges.
Attackers may exploit these issues to execute arbitrary code in the context of the application. Failed attacks may cause a denial-of-service condition.
Adobe Shockwave Player 11.5.7.609 and prior are vulnerable.
NOTE: These issues were previously covered in BID 42657 (Adobe Shockwave Player APSB10-20 Multiple Remote Vulnerabilities) but has been given their own record to better document them.
Adobe Shockwave Player is prone to multiple remote code-execution vulnerabilities.
Very few technical details are currently available. We will update this BID as more information emerges.
Attackers may exploit these issues to execute arbitrary code in the context of the application. Failed attacks may cause a denial-of-service condition.
Adobe Shockwave Player 11.5.7.609 and prior are vulnerable.
NOTE: These issues were previously covered in BID 42657 (Adobe Shockwave Player APSB10-20 Multiple Remote Vulnerabilities) but has been given their own record to better document them.
Exploit / POC
Adobe Shockwave Player CVE-2010-2868 Multiple Remote Code Execution Vulnerabilities
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
A proof of concept is available from the reporter. Please see the references for more information.
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
A proof of concept is available from the reporter. Please see the references for more information.
Solution / Fix
Adobe Shockwave Player CVE-2010-2868 Multiple Remote Code Execution Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Adobe Shockwave Player CVE-2010-2868 Multiple Remote Code Execution Vulnerabilities
References:
References:
- Adobe Homepage (Adobe)
- Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2868 (Rodrigo Branco
- APSB10-20 Security update available for Shockwave Player (Adobe)