[PCWorks] Adobe Shockwave Player Multiple Vulnerabilities
- From: "Clint Hamilton-PCWorks Admin" <PCWorks@xxxxxxxxxxxxxxxxxxxxxxxx>
- To: "PCWorks@xxxxxxxxxxxxx" <pcworks@xxxxxxxxxxxxx>
- Date: Fri, 17 Feb 2012 00:12:06 -0600
TITLE:
Adobe Shockwave Player Multiple Vulnerabilities
Criticality level: Highly critical
Impact: System access
Where: From remote
Software: Adobe Shockwave Player 11.x
SECUNIA ADVISORY ID:
http://secunia.com/advisories/47932/
DESCRIPTION:
Multiple vulnerabilities have been reported in Adobe Shockwave
Player, which can be exploited by malicious people to
compromise a
user's system.
1) An unspecified error in the Shockwave 3D Asset can be
exploited to
corrupt memory.
2) An unspecified error can be exploited to cause a heap-based
buffer
overflow.
3) An unspecified error can be exploited to corrupt memory.
4) An unspecified error in the Shockwave 3D Asset can be
exploited to
corrupt memory.
5) An unspecified error in the Shockwave 3D Asset can be
exploited to
corrupt memory.
6) An unspecified error in the Shockwave 3D Asset can be
exploited to
corrupt memory.
7) An unspecified error in the Shockwave 3D Asset can be
exploited to
corrupt memory.
8) An unspecified error in the Shockwave 3D Asset can be
exploited to
corrupt memory.
9) An unspecified error in the Shockwave 3D Asset can be
exploited to
corrupt memory.
Successful exploitation of the vulnerabilities may allow
execution of
arbitrary code.
The vulnerabilities are reported in versions 11.6.3.633 and
prior for
Windows and Macintosh.
SOLUTION:
Update to version 11.6.4.634.
ORIGINAL ADVISORY:
Adobe:
http://www.adobe.com/support/security/bulletins/apsb12-02.html
=========================
The list's FAQ's can be seen by sending an email to
PCWorks-request@xxxxxxxxxxxxx with FAQ in the subject line.
To unsubscribe, subscribe, set Digest or Vacation to on or off, go to
//www.freelists.org/list/pcworks . You can also send an email to
PCWorks-request@xxxxxxxxxxxxx with Unsubscribe in the subject line. Your
member list settings can be found at
//www.freelists.org/cgi-bin/lsg2.cgi/l=pcworks . Once logged in, you have
access to numerous other email options.
The list archives are located at //www.freelists.org/archives/pcworks/ .
All email posted to the list will be placed there in the event anyone needs to
look for previous posts.
-zxdjhu-
Other related posts:
