|
|
| |
Credit:
The original article can be found at: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-4003
The original article can be found at: http://www.securityfocus.com/bid/37872
|
| |
Vulnerable Systems:
* Adobe Shockwave Player 11.5.2 .602
* Adobe Shockwave Player 11.5.1 .601
* Adobe Shockwave Player 11.5 .601
* Adobe Shockwave Player 11.5 .600
* Adobe Shockwave Player 11.5 .596
* Adobe Shockwave Player 10.2 .023
* Adobe Shockwave Player 10
Immune system:
* Adobe Shockwave Player 11.5.2 .606
Adobe Shockwave Player is prone to multiple integer-overflow vulnerabilities.
Attackers can exploit these issues to execute arbitrary code in the context of the currently logged-in user. Failed attacks may cause denial-of-service conditions.
Versions prior to Shockwave Player 11.5.2.606 for Microsoft Windows and Apple Mac OS X are vulnerable.
Vendor Status:
Adobe as issued an update for this vulnerablity.
Patch Availability:
http://www.adobe.com/products/shockwaveplayer/
CVE Information:
CVE-2009-4003
|
|
|