RETIRED: Adobe Shockwave Player APSB12-23 Multiple Code Execution Vulnerabilities

Bugtraq ID:	56181
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Oct 23 2012 12:00AM
Updated:	Oct 24 2012 12:30PM
Credit:	Will Dormann of CERT and Honggang Ren of Fortinet's FortiGuard Labs
Vulnerable:	Adobe Shockwave Player 11.5.7 .609 Adobe Shockwave Player 11.5.6 .606 Adobe Shockwave Player 11.5.2 .606 Adobe Shockwave Player 11.5.2 .602 Adobe Shockwave Player 11.5.1 .601 Adobe Shockwave Player 11.5 .601 Adobe Shockwave Player 11.5 .600 Adobe Shockwave Player 11.5 .596 Adobe Shockwave Player 10.2 .023 Adobe Shockwave Player 9.0.432 Adobe Shockwave Player 9.0.383 Adobe Shockwave Player 8.5.325 Adobe Shockwave Player 8.5.324 Adobe Shockwave Player 8.5.323 Adobe Shockwave Player 8.5.321 Adobe Shockwave Player 8.5.1.106 Adobe Shockwave Player 8.5.1.105 Adobe Shockwave Player 8.5.1.103 Adobe Shockwave Player 8.5.1.100 Adobe Shockwave Player 8.0.205 Adobe Shockwave Player 8.0.204 Adobe Shockwave Player 8.0.196A Adobe Shockwave Player 8.0.196 Adobe Shockwave Player 11.6.4.634 Adobe Shockwave Player 11.6.3.633 Adobe Shockwave Player 11.6.1.629 Adobe Shockwave Player 11.6.0.626 Adobe Shockwave Player 11.5.9.620 Adobe Shockwave Player 11.5.9.615 Adobe Shockwave Player 11.5.8.612 Adobe Shockwave Player 11.5.0.595 Adobe Shockwave Player 11.0.3.471 Adobe Shockwave Player 11.0.0.456 Adobe Shockwave Player 11 Adobe Shockwave Player 10.2.0.022 Adobe Shockwave Player 10.2.0.021 Adobe Shockwave Player 10.1.4.020 Adobe Shockwave Player 10.1.1.016 Adobe Shockwave Player 10.1.0.011 Adobe Shockwave Player 10.0.1.004 Adobe Shockwave Player 10.0.0.210 Adobe Shockwave Player 10
Not Vulnerable:

RETIRED: Adobe Shockwave Player APSB12-23 Multiple Code Execution Vulnerabilities

Adobe Shockwave Player is prone to multiple code-execution vulnerabilities.

Successful exploits may allow an attacker to execute arbitrary code within the context of the user running the affected application. Failed attempts will likely cause a denial-of-service condition.

Adobe Shockwave Player versions 11.6.7.637and prior are vulnerable.

This BID is being retired. The following individual records exist to better document the issues:

56187 Adobe Shockwave Player CVE-2012-5273 Unspecified Buffer Overflow Vulnerability
56188 Adobe Shockwave Player Unspecified Memory Corruption Vulnerability
56190 Adobe Shockwave Player CVE-2012-4174 Unspecified Buffer Overflow Vulnerability
56193 Adobe Shockwave Player CVE-2012-4175 Unspecified Buffer Overflow Vulnerability
56194 Adobe Shockwave Player CVE-2012-4172 Unspecified Buffer Overflow Vulnerability
56195 Adobe Shockwave Player CVE-2012-4173 Unspecified Buffer Overflow Vulnerability

RETIRED: Adobe Shockwave Player APSB12-23 Multiple Code Execution Vulnerabilities

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Adobe Shockwave Player APSB12-23 Multiple Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references for details.

RETIRED: Adobe Shockwave Player APSB12-23 Multiple Code Execution Vulnerabilities

References:

• Adobe Homepage (Adobe)