ID de Prueba:	1.3.6.1.4.1.25623.1.0.800443
Categoría:	Buffer overflow
Título:	Adobe Shockwave Player 3D Model Buffer Overflow Vulnerabilities
Resumen:	This host has Adobe Shockwave Player installed and is prone to; Buffer Overflow vulnerabilities.
Descripción:	Summary: This host has Adobe Shockwave Player installed and is prone to Buffer Overflow vulnerabilities. Vulnerability Insight: These flaws are caused by buffer and integer overflow errors when processing Shockwave files or 3D models, which could be exploited to execute arbitrary code by tricking a user into visiting a specially crafted web page. Vulnerability Impact: Successful attack could allow attackers to execute arbitrary code and compromise a vulnerable system. Affected Software/OS: Adobe Shockwave Player prior to 11.5.6.606 on Windows. Solution: Upgrade to Adobe Shockwave Player 11.5.6.606 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	BugTraq ID: 37872 BugTraq ID: 37870 Common Vulnerability Exposure (CVE) ID: CVE-2009-4003 http://www.securityfocus.com/bid/37872 Bugtraq: 20100120 Secunia Research: Adobe Shockwave Player 3D Model Two Integer Overflows (Google Search) http://www.securityfocus.com/archive/1/509058/100/0/threaded Bugtraq: 20100120 Secunia Research: Adobe Shockwave Player Four Integer Overflow Vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/509055/100/0/threaded Bugtraq: 20100120 Secunia Research: Adobe Shockwave Player Integer Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/509053/100/0/threaded http://secunia.com/secunia_research/2009-62/ http://secunia.com/secunia_research/2009-63/ http://secunia.com/secunia_research/2010-1/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8538 http://securitytracker.com/id?1023481 http://secunia.com/advisories/37888 http://www.vupen.com/english/advisories/2010/0171 XForce ISS Database: shockwave-shockwave-bo(55759) https://exchange.xforce.ibmcloud.com/vulnerabilities/55759 Common Vulnerability Exposure (CVE) ID: CVE-2009-4002 http://www.securityfocus.com/bid/37870 Bugtraq: 20100120 Secunia Research: Adobe Shockwave Player 3D Model Buffer Overflow (Google Search) http://www.securityfocus.com/archive/1/509062/100/0/threaded http://secunia.com/secunia_research/2009-61/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8311 XForce ISS Database: shockwave-3d-bo(55758) https://exchange.xforce.ibmcloud.com/vulnerabilities/55758
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.