NetSight
IP …
critical9.3Public exploit code

CVE-2009-3244

Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows remote attackers to cause a denial of servi…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PlayerVersion property value.

Affected products

VendorProductAffected versions
AdobeShockwave Player
through 11.5.1.601
Versions 1.0, 2.0, 3.0, 4.0, 5.0

Weakness classification

CWE-119

References