NetSight
IP …
critical9.3

CVE-2011-0557

Integer overflow in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code via a Director movie with a large count value in…

Impact

Integer overflow in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code via a Director movie with a large count value in 3D assets type 0xFFFFFF45 record, which triggers a "faulty allocation" and memory corruption.

Affected products

VendorProductAffected versions
AdobeShockwave Player
through 11.5.9.615
Versions 1.0, 2.0, 3.0, 4.0, 5.0

Weakness classification

CWE-189

References