Detections
Analytics
Shockwave Player < 11.5.9.615
high Nessus Plugin ID 50387
Language:
Synopsis
The remote Windows host contains a web browser plugin that is affected by multiple vulnerabilities.Description
The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.9.615. Such versions are potentially affected by the following issues :- A memory corruption issue exists that could lead to code execution. Note that there are reports this issue is being exploited in the wild. (CVE-2010-3653)
- A heap-based buffer overflow vulnerability could lead to code execution. (CVE-2010-2582)
- Multiple memory corruption issues in the 'dirapi.dll' module could lead to code execution. (CVE-2010-2581, CVE-2010-3655, CVE-2010-4084, CVE-2010-4085, CVE-2010-4086, CVE-2010-4088)
- Multiple memory corruption issues in the 'IML32.dll' module could lead to code execution. (CVE-2010-4087, CVE-2010-4089)
- A memory corruption issue that could lead to code execution. (CVE-2010-4090)
Solution
Upgrade to Adobe Shockwave 11.5.9.615 or later.See Also
http://www.adobe.com/support/security/bulletins/apsb10-25.html
Plugin Details
Severity: High
ID: 50387
File Name: shockwave_player_apsb10-25.nasl
Version: 1.15
Type: local
Agent: windows
Family: Windows
Published: 10/28/2010
Updated: 7/27/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.4
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 8.1
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:adobe:shockwave_player
Required KB Items: SMB/shockwave_player
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/28/2010
Vulnerability Publication Date: 10/21/2010
Exploitable With
CANVAS (CANVAS)
Metasploit (Adobe Shockwave rcsL Memory Corruption)
Reference Information
CVE: CVE-2010-2581, CVE-2010-2582, CVE-2010-3653, CVE-2010-3655, CVE-2010-4084, CVE-2010-4085, CVE-2010-4086, CVE-2010-4087, CVE-2010-4088, CVE-2010-4089, CVE-2010-4090
BID: 44291, 44512, 44513, 44514, 44515, 44516, 44517, 44518, 44510, 44520, 44521