ZDI-11-217: Adobe Shockwave Font Structure Parsing Remote Code Execution Vulnerability

ZDI-11-217: Adobe Shockwave Font Structure Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-217 June 14, 2011 -- CVE ID: CVE-2011-2109 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave Player --...

PT-2011-3599

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.6.0.626 Description The issue is related to multiple integer overflows in Dirapi.dll, which allows attackers to execute arbitrary code. Additionally, there are remote code execution vulnerabilities...