Adobe Shockwave Player CVE-2011-2108 Unspecified Remote Code Execution Vulnerability

Bugtraq ID:	48311
Class:	Unknown
CVE:	CVE-2011-2108
Remote:	Yes
Local:	No
Published:	Jun 14 2011 12:00AM
Updated:	Jun 14 2011 12:00AM
Credit:	Will Dormann of CERT.
Vulnerable:	Adobe Shockwave Player 11.5.7 .609 Adobe Shockwave Player 11.5.6 .606 Adobe Shockwave Player 11.5.2 .606 Adobe Shockwave Player 11.5.2 .602 Adobe Shockwave Player 11.5.1 .601 Adobe Shockwave Player 11.5 .601 Adobe Shockwave Player 11.5 .600 Adobe Shockwave Player 11.5 .596 Adobe Shockwave Player 11.5.9.620 Adobe Shockwave Player 11.5.9.615 Adobe Shockwave Player 11.5.8.612 Adobe Shockwave Player 11.5.0.595 Adobe Shockwave Player 11.0.3.471 Adobe Shockwave Player 11.0.0.456 Adobe Shockwave Player 11
Not Vulnerable:	Adobe Shockwave Player 11.6.0.626

Adobe Shockwave Player CVE-2011-2108 Unspecified Remote Code Execution Vulnerability

Adobe Shockwave Player is prone to an unspecified remote code-execution vulnerability.

Attackers can exploit this issue to crash the affected application and to execute arbitrary code within the context of the affected application.

NOTE: This issue was previously covered in BID 48270 (Adobe Shockwave Player APSB11-17 Multiple Remote Vulnerabilities) but has been given its own record to better document it.

Versions prior to Adobe Shockwave Player 11.6.0.626 are vulnerable.

Adobe Shockwave Player CVE-2011-2108 Unspecified Remote Code Execution Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Shockwave Player CVE-2011-2108 Unspecified Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references for details.

Adobe Shockwave Player CVE-2011-2108 Unspecified Remote Code Execution Vulnerability

References:

• Adobe Homepage (Adobe)
  
• APSB11-17 Security update available for Adobe Shockwave Player (Adobe)