Test ID:	1.3.6.1.4.1.25623.1.0.800443
Category:	Buffer overflow
Title:	Adobe Shockwave Player 3D Model Buffer Overflow Vulnerabilities
Summary:	Adobe Shockwave Player is prone to buffer overflow vulnerabilities.
Description:	Summary: Adobe Shockwave Player is prone to buffer overflow vulnerabilities. Vulnerability Insight: These flaws are caused by buffer and integer overflow errors when processing Shockwave files or 3D models, which could be exploited to execute arbitrary code by tricking a user into visiting a specially crafted web page. Vulnerability Impact: Successful attack could allow attackers to execute arbitrary code and compromise a vulnerable system. Affected Software/OS: Adobe Shockwave Player prior to 11.5.6.606 on Windows. Solution: Upgrade to Adobe Shockwave Player 11.5.6.606 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4003 BugTraq ID: 37872 http://www.securityfocus.com/bid/37872 Bugtraq: 20100120 Secunia Research: Adobe Shockwave Player 3D Model Two Integer Overflows (Google Search) http://www.securityfocus.com/archive/1/509058/100/0/threaded Bugtraq: 20100120 Secunia Research: Adobe Shockwave Player Four Integer Overflow Vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/509055/100/0/threaded Bugtraq: 20100120 Secunia Research: Adobe Shockwave Player Integer Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/509053/100/0/threaded http://secunia.com/secunia_research/2009-62/ http://secunia.com/secunia_research/2009-63/ http://secunia.com/secunia_research/2010-1/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8538 http://securitytracker.com/id?1023481 http://secunia.com/advisories/37888 http://www.vupen.com/english/advisories/2010/0171 XForce ISS Database: shockwave-shockwave-bo(55759) https://exchange.xforce.ibmcloud.com/vulnerabilities/55759 Common Vulnerability Exposure (CVE) ID: CVE-2009-4002 BugTraq ID: 37870 http://www.securityfocus.com/bid/37870 Bugtraq: 20100120 Secunia Research: Adobe Shockwave Player 3D Model Buffer Overflow (Google Search) http://www.securityfocus.com/archive/1/509062/100/0/threaded http://secunia.com/secunia_research/2009-61/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8311 XForce ISS Database: shockwave-3d-bo(55758) https://exchange.xforce.ibmcloud.com/vulnerabilities/55758
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.