[PCWorks] Adobe Shockwave Player Multiple Vulnerabilities
- From: "Clint Hamilton-PCWorks Admin" <PCWorks@xxxxxxxxxxxxxxxxxxxxxxxx>
- To: "PCWorks@xxxxxxxxxxxxx" <pcworks@xxxxxxxxxxxxx>
- Date: Thu, 11 Aug 2011 04:39:18 -0500
TITLE:
Adobe Shockwave Player Multiple Vulnerabilities
Criticality level: Highly critical
Impact: System access
Where: From remote
Software: Adobe Shockwave Player 11.x
SECUNIA ADVISORY ID:
http://secunia.com/advisories/45584/
DESCRIPTION:
Multiple vulnerabilities have been reported in Shockwave
Player,
which can be exploited by malicious people to compromise a
user'
system.
1) An unspecified error can be exploited to corrupt memory.
2) An unspecified error can be exploited to corrupt memory.
3) An unspecified error in IML32.dll can be exploited to
corrupt
memory.
4) An unspecified error can be exploited to corrupt memory.
5) An unspecified error in Dirapi.dll can be exploited to
corrupt
memory.
6) An unspecified error in TextXtra.x32 can be exploited to
corrupt
memory.
7) An unspecified error in the bundled version of msvcr90.dll
can be
exploited to corrupt memory.
Successful exploitation of the vulnerabilities may allow
execution of
arbitrary code.
The vulnerabilities are reported in version 11.6.0.626 and
prior for
Windows and Macintosh.
SOLUTION:
Update to version 11.6.1.629.
ORIGINAL ADVISORY:
http://www.adobe.com/support/security/bulletins/apsb11-19.html
=========================
The list's FAQ's can be seen by sending an email to
PCWorks-request@xxxxxxxxxxxxx with FAQ in the subject line.
To unsubscribe, subscribe, set Digest or Vacation to on or off, go to
//www.freelists.org/list/pcworks . You can also send an email to
PCWorks-request@xxxxxxxxxxxxx with Unsubscribe in the subject line. Your
member list settings can be found at
//www.freelists.org/cgi-bin/lsg2.cgi/l=pcworks . Once logged in, you have
access to numerous other email options.
The list archives are located at //www.freelists.org/archives/pcworks/ .
All email posted to the list will be placed there in the event anyone needs to
look for previous posts.
-zxdjhu-
Other related posts:
