| Package | Affected versions | Patched versions |
|---|---|---|
| shockwave player | = 1.0= 10.0.0.210= 10.0.1.004= 10.1.0.011= 10.1.0.11= 10.1.1.016= 10.1.4.020= 10.2.0.021= 10.2.0.022= 10.2.0.023= 11.0.0.456= 11.0.3.471= 11.5.0.595= 11.5.0.596= 11.5.1.601= 11.5.2.602= 11.5.6.606= 2.0= 3.0= 4.0= 5.0= 6.0= 8.0= 8.0.196= 8.0.196a= 8.0.204= 8.0.205= 8.5.1= 8.5.1.100= 8.5.1.103= 8.5.1.105= 8.5.1.106= 8.5.321= 8.5.323= 8.5.324= 8.5.325= 9= 9.0.383= 9.0.432≤ 11.5.7.609 |
Adobe Shockwave Player before 11.5.8.612 does not properly validate values associated with buffer-size calculation for a 0xFFFFFFF8 record in a (1) .dir or (2) .dcr Director movie, which allows remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted movie.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free