Adobe patch 18 critical holes in Shockwave Player
Adobe have released Adobe Shockwave Player 11.5.8.612 to close 18 critical holes on Windows and Mac OS X systems. The vulnerabilities, which mostly allow for remote code execution, exist in all versions up to and including Shockwave Player 11.5.7.609.
The flaws include invalid memory seeking and corruption when processing Director movies and appear to all require a user to visit or open a web page containing a manipulated movie file, to be exploited. Some denial of service issues have been fixed, one of which may lead to arbitrary code execution, although Adobe have been unable to demonstrate it doing so. Adobe say the update is a critical update and recommend installation as soon as possible. The updated version of Shockwave Player is available to download.
See also:
- Security update available for Shockwave Player, advisory from Adobe.
(djwm)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/6/7/2/comingin310_4_kicker-4977194bfb0de0d7.png)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/3/2/3/comingin310_3_kicker-151cd7b9e9660f05.png)
