| Package | Affected versions | Patched versions |
|---|---|---|
| shockwave player | = 1.0= 10.0.0.210= 10.0.1.004= 10.1.0.011= 10.1.0.11= 10.1.1.016= 10.1.4.020= 10.2.0.021= 10.2.0.022= 10.2.0.023= 11.0.0.456= 11.0.3.471= 11.5.0.595= 11.5.0.596= 11.5.1.601= 11.5.2.602= 11.5.6.606= 11.5.7.609= 2.0= 3.0= 4.0= 5.0= 6.0= 8.0= 8.0.196= 8.0.196a= 8.0.204= 8.0.205= 8.5.1= 8.5.1.100= 8.5.1.103= 8.5.1.105= 8.5.1.106= 8.5.321= 8.5.323= 8.5.324= 8.5.325= 9.0.383= 9.0.432≤ 11.5.8.612 |
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in the wild in October 2010. NOTE: some of these details are obtained from third party information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free