| Package | Affected versions | Patched versions |
|---|---|---|
| shockwave player | = 1.0= 10.0.0.210= 10.0.1.004= 10.1.0.011= 10.1.0.11= 10.1.1.016= 10.1.4.020= 10.2.0.021= 10.2.0.022= 10.2.0.023= 11.0.0.456= 11.0.3.471= 11.5.0.595= 11.5.0.596= 11.5.1.601= 11.5.2.602= 11.5.6.606= 2.0= 3.0= 4.0= 5.0= 6.0= 8.0= 8.0.196= 8.0.196a= 8.0.204= 8.0.205= 8.5.1= 8.5.1.100= 8.5.1.103= 8.5.1.105= 8.5.1.106= 8.5.321= 8.5.323= 8.5.324= 8.5.325= 9= 9.0.383= 9.0.432≤ 11.5.7.609 |
IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x24C6 of a certain file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free