Security updates available for Shockwave Player

Security updates available for Shockwave Player Release date: November 3, 2009 Vulnerability identifier: APSB09-16 CVE number: CVE-2009-3244, CVE-2009-3463, CVE-2009-3464, CVE-2009-3465, CVE-2009-3466 Platform: Windows and Macintosh Summary Critical vulnerabilities have been identified in Adobe...

CVE-2009-3244

CVE-2009-3244 is a heap-based buffer overflow in the SwDir.dll ActiveX control of Adobe Shockwave Player (11.5.1.601 and earlier). The overflow is triggered by a long PlayerVersion property, allowing a remote attacker to cause a denial of service and possibly execute arbitrary code. Affected plat...