Secunia Research: Adobe Shockwave Player "DEMX" Chunk Parsing Vulnerability

====================================================================== Secunia Research 29/10/2010 - Adobe Shockwave Player "DEMX" Chunk Parsing Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2010-2582

An unspecified function in TextXtra.x32 in Adobe Shockwave Player before 11.5.9.615 does not properly reallocate a buffer when processing a DEMX chunk in a Director file, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code...

CVE-2010-2582

CVE-2010-2582 affects Adobe Shockwave Player (Windows/macOS) via a heap-based buffer overflow in the TextXtra.x32 DEMX chunk parsing, caused by a failure to reallocate a buffer to fit chunk data. Public docs consistently describe this as a vulnerability that allows remote code execution if a craf...

Shockwave Player < 11.5.9.615

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.9.615. Such versions are potentially affected by the following issues : - A memory corruption issue exists that could lead to code execution. Note that there are reports this issue is being exploited ...