CVE-2010-0128

Related Files

Adobe Shockwave Player Signedness Error Vulnerability

Posted May 12, 2010

Authored by Alin Rad Pop | Site secunia.com

Secunia Research has discovered a vulnerability in Adobe Shockwave Player, which can be exploited by malicious people to potentially compromise a user's system. The vulnerability is caused due to a signedness error when processing Shockwave files. This can be exploited to corrupt memory when a specially crafted Shockwave file (e.g. ".dir") is opened. Successful exploitation may allow execution of arbitrary code. Version 11.5.6.606 is affected.

tags | advisory, arbitrary

advisories | CVE-2010-0128

SHA-256 | 0de19e3ef14663cc00a96c258b363f1f0f8271752f2f8f61678d437370f2d5b8

Download | Favorite | View

Core Security Technologies Advisory 2010.0405

Posted May 12, 2010

Authored by Core Security Technologies | Site coresecurity.com

Core Security Technologies Advisory - Adobe Director is prone to a vulnerability due to an invalid read in 'DIRAPI.DLL', when opening a malformed .dir file. This vulnerability could be used by a remote attacker to execute arbitrary code, by enticing the user of Adobe Director to open a specially crafted file.

tags | advisory, remote, arbitrary

advisories | CVE-2010-0128

SHA-256 | 7168bea5459b9ed347373ab8db050ec91b0f4575d1bcaa89f2013cb5eaab82f1

Download | Favorite | View