National Cyber Awareness System

Vulnerability Summary for CVE-2010-3653

Overview

The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in the wild in October 2010. NOTE: some of these details are obtained from third party information.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#402231

Name: VU#402231

Hyperlink:http://www.kb.cert.org/vuls/id/402231

External Source: XF

Name: adobe-shockwave-rcsl-code-exec(62688)

Hyperlink:http://xforce.iss.net/xforce/xfdb/62688

External Source: VUPEN

Name: ADV-2010-2752

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/2752

External Source: SECTRACK

Name: 1024635

Hyperlink:http://www.securitytracker.com/id?1024635

External Source: BID

Name: 44291

Hyperlink:http://www.securityfocus.com/bid/44291

External Source: EXPLOIT-DB

Name: 15296

Hyperlink:http://www.exploit-db.com/exploits/15296

External Source: CONFIRM

Name: http://www.adobe.com/support/security/bulletins/apsb10-25.html

Hyperlink:http://www.adobe.com/support/security/bulletins/apsb10-25.html

External Source: MISC

Name: http://www.abysssec.com/blog/2010/10/adobe-shockwave-player-rcsl-chunk-memory-corruption-0day/

Hyperlink:http://www.abysssec.com/blog/2010/10/adobe-shockwave-player-rcsl-chunk-memory-corruption-0day/

External Source: OVAL

Name: oval:org.mitre.oval:def:11285

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11285

References to Check Content

Identifier:oval:org.mitre.oval:def:11285

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:11285