Adobe Shockwave Player 'SetVertexArray()' CVE-2010-4090 Memory Corruption Vulnerability

Bugtraq ID:	44515
Class:	Unknown
CVE:	CVE-2010-4090
Remote:	Yes
Local:	No
Published:	Oct 28 2010 12:00AM
Updated:	Oct 29 2010 06:48PM
Credit:	An anonymous reporter through TippingPoint's Zero Day Initiative
Vulnerable:	Adobe Shockwave Player 11.5.7 .609 Adobe Shockwave Player 11.5.6 .606 Adobe Shockwave Player 11.5.2 .606 Adobe Shockwave Player 11.5.2 .602 Adobe Shockwave Player 11.5.1 .601 Adobe Shockwave Player 11.5 .601 Adobe Shockwave Player 11.5 .600 Adobe Shockwave Player 11.5 .596 Adobe Shockwave Player 11.5.8.612 Adobe Shockwave Player 11.5.0.595 Adobe Shockwave Player 11.0.0.456 Adobe Shockwave Player 11
Not Vulnerable:	Adobe Shockwave Player 11.5.9.615

Adobe Shockwave Player 'SetVertexArray()' CVE-2010-4090 Memory Corruption Vulnerability

Adobe Shockwave Player is prone to a memory-corruption vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed attacks may cause a denial-of-service condition.

Versions prior to Adobe Shockwave Player 11.5.9.615 are vulnerable.

Adobe Shockwave Player 'SetVertexArray()' CVE-2010-4090 Memory Corruption Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Shockwave Player 'SetVertexArray()' CVE-2010-4090 Memory Corruption Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

Adobe Shockwave Player 'SetVertexArray()' CVE-2010-4090 Memory Corruption Vulnerability

References:

• Adobe Homepage (Adobe)
  
• Adobe Shockwave Player Homepage (Adobe)
  
• APSB10-25 Security update available for Shockwave Player (Adobe)
  
• ZDI-10-228 Adobe Shockwave Player Director File SetVertexArray Remote Code Execu (Zero Day Initiative)