Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4089

Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file...

CVE-2010-4089

CVE-2010-4089 affects Adobe Shockwave Player, where IML32.dll can memory-corrupt via a crafted .dir file containing duplicated LCSM entries in an mmap record. This enables arbitrary code execution or a denial of service. Affected versions are Shockwave Player prior to 11.5.9.615. Remediation: upg...

CVE-2010-4089

IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a .dir file containing "duplicated LCSM entries in mmap record," a different vulnerability than CVE-2010-4087...

Shockwave Player < 11.5.9.615

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.9.615. Such versions are potentially affected by the following issues : - A memory corruption issue exists that could lead to code execution. Note that there are reports this issue is being exploited ...