Signature Detail
Short Name |
HTTP:STC:ADOBE:SHKWV-LINGO-BOF |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Adobe Shockwave Player lingo API Buffer Overflow |
Release Date |
2014/08/25 |
Update Number |
2411 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Adobe Shockwave Player lingo API Buffer Overflow
This signature detects attempts to exploit a known vulnerability against Adobe Shockwave Player. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected application.
Extended Description
Buffer overflow in Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code via unspecified vectors.
Affected Products
- adobe shockwave_player 1.0
- adobe shockwave_player 10.0.0.210
- adobe shockwave_player 10.0.1.004
- adobe shockwave_player 10.1.0.011
- adobe shockwave_player 10.1.0.11
- adobe shockwave_player 10.1.1.016
- adobe shockwave_player 10.1.4.020
- adobe shockwave_player 10.2.0.021
- adobe shockwave_player 10.2.0.022
- adobe shockwave_player 10.2.0.023
- adobe shockwave_player 11.0.0.456
- adobe shockwave_player 11.0.3.471
- adobe shockwave_player 11.5.0.595
- adobe shockwave_player 11.5.0.596
- adobe shockwave_player 11.5.10.620
- adobe shockwave_player 11.5.1.601
- adobe shockwave_player 11.5.2.602
- adobe shockwave_player 11.5.6.606
- adobe shockwave_player 11.5.7.609
- adobe shockwave_player 11.5.8.612
- adobe shockwave_player 11.5.9.615
- adobe shockwave_player 11.5.9.620
- adobe shockwave_player 11.6.0.626
- adobe shockwave_player 11.6.1.629
- adobe shockwave_player 11.6.3.633
- adobe shockwave_player 11.6.4.634
- adobe shockwave_player 11.6.5.635
- adobe shockwave_player 11.6.6.636
- adobe shockwave_player 11.6.7.637
- adobe shockwave_player 11.6.8.638
- adobe shockwave_player 2.0
- adobe shockwave_player 3.0
- adobe shockwave_player 4.0
- adobe shockwave_player 5.0
- adobe shockwave_player 6.0
- adobe shockwave_player 8.0
- adobe shockwave_player 8.0.196
- adobe shockwave_player 8.0.196a
- adobe shockwave_player 8.0.204
- adobe shockwave_player 8.0.205
- adobe shockwave_player 8.5.1
- adobe shockwave_player 8.5.1.100
- adobe shockwave_player 8.5.1.103
- adobe shockwave_player 8.5.1.105
- adobe shockwave_player 8.5.1.106
- adobe shockwave_player 8.5.321
- adobe shockwave_player 8.5.323
- adobe shockwave_player 8.5.324
- adobe shockwave_player 8.5.325
- adobe shockwave_player 9
- adobe shockwave_player 9.0.383
- adobe shockwave_player 9.0.432
- adobe shockwave_player up to 12.0.0.112
References
- CVE: CVE-2013-1383