Summary
This host is installed with Adobe Shockwave Player and is prone to multiple remote code execution vulnerabilities.
Impact
Successful exploitation will allow attackers to cause denail of service or execute arbitrary code by tricking a user into visiting a specially crafted web page.
Impact Level: System/Application
Solution
Upgrade to Adobe Shockwave Player version 11.6.1.629 or later, For updates refer to http://get.adobe.com/shockwave/otherversions/
Insight
Multiple flaws are caused by memory corruptions errors in the IML32.dll, Dirapi.dll, Textra.x32 and msvcr90.dll component when processing malformed '.dir' media file.
Affected
Adobe Shockwave Player Versions prior to 11.6.1.629 on Windows.
References
Severity
Classification
-
CVE CVE-2010-4308, CVE-2010-4309, CVE-2011-2419, CVE-2011-2420, CVE-2011-2421, CVE-2011-2422, CVE-2011-2423 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Active Perl Locale::Maketext Module Multiple Code Injection Vulnerabilities (Windows)
- Adobe Acrobat and Reader PDF Handling Multiple Vulnerabilities (Linux)
- Adobe AIR Multiple Vulnerabilities -01 Feb13 (Linux)
- Adobe Acrobat Multiple Vulnerabilities-01 Sep14 (Mac OS X)
- Adobe Acrobat Multiple Unspecified Vulnerabilities - Windows