• info
• discussion
• exploit
• solution
• references

Adobe Shockwave Player Director File Parsing Remote Code Execution Vulnerability

Adobe Shockwave Player is prone to a remote code-execution vulnerability caused by a memory-dereferencing error while parsing Adobe Director files.

Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts may cause a denial-of-service condition.

Versions prior to Shockwave Player 11.5.0.600 for Microsoft Windows are vulnerable.