Signature Detail

HTTP: Adobe Shockwave Player DIR Files PAMI Chunk Code Execution

This signature detects attempts to exploit a known vulnerability in Adobe Shockwave Player. It is due to an input validation error while parsing specially crafted PAMI RIFF chunk data in a DIR file. The vulnerable code does not validate an offset value provided in the chunk data before using it to calculate a memory pointer. Remote attackers can exploit this by enticing target users to open a malicious DIR file using a vulnerable version of the product. A successful attack can result in arbitrary code execution in the security context of the logged in user.

Extended Description

Adobe Shockwave Player is prone to a remote code-execution vulnerability. Attackers can exploit this issue to crash the affected application and execute arbitrary code. Adobe Shockwave Player 11.5.6.606 and prior are vulnerable. NOTE: This issue was previously discussed in BID 40066 (Adobe Shockwave Player APSB10-12 Multiple Remote Vulnerabilities) but has been given its own record to better document it.

Affected Products

• Adobe Shockwave Player 11.5.0.596
• Adobe Shockwave Player 11.5.0.600
• Adobe Shockwave Player 11.5.0.601
• Adobe Shockwave Player 11.5.1.601
• Adobe Shockwave Player 11.5.2.602
• Adobe Shockwave Player 11.5.2.606
• Adobe Shockwave Player 11.5.6.606

References

• BugTraq: 40079
• CVE: CVE-2010-1292