Gravità: : Critico
  Identificatori CVE: CVE-2010-3653
  Data notifica: 21 luglio 2015

  Descrizione

The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in the wild in October 2010. NOTE: some of these details are obtained from third party information.

  Informazioni esposizione:

Apply associated Trend Micro DPI Rules.

  Soluzioni

  Trend Micro Deep Security DPI Rule Number: 1004487
  Trend Micro Deep Security DPI Rule Name: 1004487 - Adobe Shockwave Player rcsL Chunk EAX Register Memory Corruption Vulnerability

  Software e versione interessati:

  • Adobe Shockwave Player 1.0
  • Adobe Shockwave Player 10.0.0.2100
  • Adobe Shockwave Player 10.0.1.004
  • Adobe Shockwave Player 10.1.0.011
  • Adobe Shockwave Player 10.1.0.11
  • Adobe Shockwave Player 10.1.1.016
  • Adobe Shockwave Player 10.1.4.020
  • Adobe Shockwave Player 10.2.0.021
  • Adobe Shockwave Player 10.2.0.022
  • Adobe Shockwave Player 10.2.0.023
  • Adobe Shockwave Player 11.0.0.456
  • Adobe Shockwave Player 11.0.3.471
  • Adobe Shockwave Player 11.5.0.595
  • Adobe Shockwave Player 11.5.0.596
  • Adobe Shockwave Player 11.5.1.601
  • Adobe Shockwave Player 11.5.2.602
  • Adobe Shockwave Player 11.5.6.606
  • Adobe Shockwave Player 11.5.7.609
  • Adobe Shockwave Player 11.5.8.612
  • Adobe Shockwave Player 2.0
  • Adobe Shockwave Player 3.0
  • Adobe Shockwave Player 4.0
  • Adobe Shockwave Player 5.0
  • Adobe Shockwave Player 6.0
  • Adobe Shockwave Player 8.0
  • Adobe Shockwave Player 8.0.196
  • Adobe Shockwave Player 8.0.196a
  • Adobe Shockwave Player 8.0.204
  • Adobe Shockwave Player 8.0.205
  • Adobe Shockwave Player 8.5.1
  • Adobe Shockwave Player 8.5.1.100
  • Adobe Shockwave Player 8.5.1.103
  • Adobe Shockwave Player 8.5.1.105
  • Adobe Shockwave Player 8.5.1.106
  • Adobe Shockwave Player 8.5.321
  • Adobe Shockwave Player 8.5.323
  • Adobe Shockwave Player 8.5.324
  • Adobe Shockwave Player 8.5.325
  • Adobe Shockwave Player 9.0.383
  • Adobe Shockwave Player 9.0.432