Adobe Shockwave Player 'DIRAPI.dll' Memory Corruption Remote Code Execution Vulnerability
BID:46325
Info
Adobe Shockwave Player 'DIRAPI.dll' Memory Corruption Remote Code Execution Vulnerability
| Bugtraq ID: | 46325 |
| Class: | Unknown |
| CVE: |
CVE-2010-4191 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 08 2011 12:00AM |
| Updated: | Feb 17 2011 03:19PM |
| Credit: | An anonymous reporter through TippingPoint's Zero Day Initiative; Chaouki Bekrar of VUPEN Security |
| Vulnerable: |
Adobe Shockwave Player 11.5.7 .609 Adobe Shockwave Player 11.5.6 .606 Adobe Shockwave Player 11.5.2 .606 Adobe Shockwave Player 11.5.2 .602 Adobe Shockwave Player 11.5.1 .601 Adobe Shockwave Player 11.5 .601 Adobe Shockwave Player 11.5 .600 Adobe Shockwave Player 11.5 .596 Adobe Shockwave Player 11.5.9.615 Adobe Shockwave Player 11.5.8.612 Adobe Shockwave Player 11.5.0.595 Adobe Shockwave Player 11.0.3.471 Adobe Shockwave Player 11.0.0.456 Adobe Shockwave Player 11 |
| Not Vulnerable: |
Adobe Shockwave Player 11.5.9.620 |
Discussion
Adobe Shockwave Player 'DIRAPI.dll' Memory Corruption Remote Code Execution Vulnerability
Adobe Shockwave Player is prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary code within the context of the user running the affected application. Failed attempts will likely cause a denial-of-service condition.
Versions prior to Shockwave Player 11.5.9.620 are vulnerable.
NOTE: This issue was originally discussed in BID 46284 (Adobe Shockwave Player APSB11-01 Multiple Remote Vulnerabilities) but has been given its own record to better document it.
Adobe Shockwave Player is prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary code within the context of the user running the affected application. Failed attempts will likely cause a denial-of-service condition.
Versions prior to Shockwave Player 11.5.9.620 are vulnerable.
NOTE: This issue was originally discussed in BID 46284 (Adobe Shockwave Player APSB11-01 Multiple Remote Vulnerabilities) but has been given its own record to better document it.
Exploit / POC
Adobe Shockwave Player 'DIRAPI.dll' Memory Corruption Remote Code Execution Vulnerability
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Adobe Shockwave Player 'DIRAPI.dll' Memory Corruption Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Adobe Shockwave Player 'DIRAPI.dll' Memory Corruption Remote Code Execution Vulnerability
References:
References:
- Adobe Homepage (Adobe)
- VUPEN Security Research - Adobe Shockwave DIRAPI LCTX Chunck Memory Corruption V ("VUPEN Security Research"
- APSB11-01 Security update available for Shockwave Player (Adobe)