Tuesday, August 31, 2010

Adobe Shockwave Player: rcsL Chunk Remote Code Execution Vulnerability

Users of Adobe Shockwave Player please be advised of a rcsL Chunk Remote Code Execution vulnerability that has been identified.

To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)

Amplify’d from www.criticalwatch.com

ZDI-10-162: ZDI-10-162: Adobe Shockwave Director rcsL Chunk Remote Code Execution Vulnerability

-- Affected Products:

Adobe Shockwave Player
-- Vulnerability Details:

This vulnerability allows remote attackers to execute arbitrary code on

vulnerable installations of the Adobe Shockwave Player. User interaction

is required to exploit this vulnerability in that the target must visit

a malicious page or open a malicious file.Read more at www.criticalwatch.com
 

No comments:

Post a Comment