Adobe Shockwave Player Use-After-Free Vulnerability

  1. Network Vulnerabilities
  2. General
  3. Adobe Shockwave Player Use-After-Free Vulnerability
Summary
This host is installed with Adobe Shockwave Player and is prone to use-after-free vulnerability.
Impact
Successful exploitation will let the user-assisted remote attackers to execute arbitrary code via a crafted web site related to the Shockwave Settings window and an unloaded library. Impact Level: System/Application.
Solution
Upgrade to Adobe Shockwave Player Version 11.5.9.620, For updates refer to http://get.adobe.com/shockwave/otherversions/
Insight
The flaw is due to a use-after-free error in an automatically installed compatibility component.
Affected
Adobe Shockwave Player Version 11.5.9.615 on Windows.
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities