Adobe Shockwave Director File KEY Chunk Parsing Buffer Overflow (APSB11-17; CVE-2011-2111)

A buffer overflow vulnerability has been reported in Adobe Shockwave Player. The vulnerability is due to a mishandling of the Chunk Size field value. Remote attackers can exploit this vulnerability by persuading a target user to open a specially crafted DIR or DCR file with a vulnerable product...

ZDI-11-220: Adobe Shockwave Director File rcsL Chunk Multiple Opcode Parsing Remote Code Execution Vulnerability

ZDI-11-220: Adobe Shockwave Director File rcsL Chunk Multiple Opcode Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-220 June 15, 2011 -- CVE ID: CVE-2011-0335 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Adobe -- Affected Products:...