CVE-2005-3525

Related Files

Zero Day Initiative Advisory 06-02

Posted Feb 26, 2006

Authored by Peter Vreugdenhil, Tipping Point | Site zerodayinitiative.com

Adobe Macromedia Shockwave is susceptible to a remote code execution flaw. This specific flaw exists within the ActiveX control with CLSID 166B1BCA-3F9C-11CF-8075-444553540000. Specifying large values for two specific parameters to this control results in an exploitable stack based buffer overflow. Due to the nature of this vulnerability, the target user is not required to have fully completed an installation of Shockwave to be vulnerable.

tags | advisory, remote, overflow, code execution, activex

advisories | CVE-2005-3525

SHA-256 | 5cfaec539f1b7ff761308b0fdf9486321ec0325ee3f51ac51d4e9913b27e0688

Download | Favorite | View