Adobe Shockwave Player 'dirapi.dll' Stack Overflow Vulnerability

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: CRITICAL

  Advisory Date: JUL 21, 2015

---

  DESCRIPTION

Stack-based buffer overflow in dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code via unspecified vectors.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1004517

  Trend Micro Deep Security DPI Rule Name: 1004517 - Adobe Shockwave Player 'dirapi.dll' Stack Overflow Vulnerability

  AFFECTED SOFTWARE AND VERSION

• Adobe Shockwave Player 10.0.0.210
• Adobe Shockwave Player 1.0
• Adobe Shockwave Player 10.0.1.004
• Adobe Shockwave Player 10.1.0.011
• Adobe Shockwave Player 10.1.0.11
• Adobe Shockwave Player 10.1.1.016
• Adobe Shockwave Player 10.1.4.020
• Adobe Shockwave Player 10.2.0.021
• Adobe Shockwave Player 10.2.0.022
• Adobe Shockwave Player 10.2.0.023
• Adobe Shockwave Player 11.0.0.456
• Adobe Shockwave Player 11.0.3.471
• Adobe Shockwave Player 11.5.0.595
• Adobe Shockwave Player 11.5.0.596
• Adobe Shockwave Player 11.5.1.601
• Adobe Shockwave Player 11.5.2.602
• Adobe Shockwave Player 11.5.6.606
• Adobe Shockwave Player 11.5.7.609
• Adobe Shockwave Player 11.5.8.612
• Adobe Shockwave Player 2.0
• Adobe Shockwave Player 3.0
• Adobe Shockwave Player 4.0
• Adobe Shockwave Player 5.0
• Adobe Shockwave Player 6.0
• Adobe Shockwave Player 8.0
• Adobe Shockwave Player 8.0.196
• Adobe Shockwave Player 8.0.196a
• Adobe Shockwave Player 8.0.204
• Adobe Shockwave Player 8.0.205
• Adobe Shockwave Player 8.5.1
• Adobe Shockwave Player 8.5.1.100
• Adobe Shockwave Player 8.5.1.103
• Adobe Shockwave Player 8.5.1.105
• Adobe Shockwave Player 8.5.1.106
• Adobe Shockwave Player 8.5.321
• Adobe Shockwave Player 8.5.323
• Adobe Shockwave Player 8.5.324
• Adobe Shockwave Player 8.5.325
• Adobe Shockwave Player 9
• Adobe Shockwave Player 9.0.383
• Adobe Shockwave Player 9.0.432