Update Protection against Adobe Shockwave Player MCsL Parsing Memory Corruption Vulnerabilities (APSB10-20)
| Check Point Reference: | CPAI-2010-253 | |
| Date Published: | ||
| Severity: | ||
| Source: | Adobe Security Bulletin APSB10-20 | |
| Industry Reference(s): | CVE-2010-2864 CVE-2010-2881 |
|
| Protection Provided by: |
Security Gateway
|
|
| Who is Vulnerable? Shockwave Player 11.5.7.609 and earlier versions for Windows and Macintosh | ||
| Vulnerability Description Multiple vulnerabilities have been identified in Adobe Shockwave Player. Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. An attacker can exploit these issues via a specially crafted DIR file. A remote attacker may exploit these vulnerabilities to cause memory corruption on an affected system. |
||
|
Update/Patch Available Apply Hotfix: Adobe Security Bulletin APSB10-20 |
|
|
Vulnerability Details The vulnerabilities are due to an error in the module IML32.dll XtcL of Adobe Shockwave Player while parsing specially crafted Director files. A remote attacker can exploit this issue by enticing a user to open a malicious DIR file with an overly large length value. Successful exploitation of these vulnerabilities would allow the attacker to execute arbitrary code on an affected system. |
Protection Overview
This protection detects and blocks the transferring of malformed Adobe DIR files over HTTP.
In order for the protection to be activated, update your Security Gateway product to the latest IPS update. For information on how to update IPS, go to SBP-2006-05, Protection taband select the version of your choice.
To configure the defense, select your product from the list below and follow the related protection steps.