Adobe Shockwave Player Lnam Chunk Processing Buffer Overflow (APSB10-25; CVE-2010-3655)

A code execution vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due to an error in Adobe Shockwave Player while parsing stringArray structures inside Lman chunks in crafted Director files. A remote attacker can exploit this issue by enticing a user to open a...

CVE-2010-3655

CVE-2010-3655 affects Adobe Shockwave Player prior to 11.5.9.615, due to a stack-based buffer overflow in the DIRAPI.DLL when parsing Lnam chunk data, enabling arbitrary code execution. Affected software is Adobe Shockwave Player (plug-in), with vulnerable component in dirapi.dll. The issue is tr...

Shockwave Player < 11.5.9.615

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.9.615. Such versions are potentially affected by the following issues : - A memory corruption issue exists that could lead to code execution. Note that there are reports this issue is being exploited ...