“As always, Adobe recommends that users follow security best practices by keeping their anti-malware software and definitions up-to-date.” “We are currently working on determining the schedule for an update to address this vulnerability in Adobe Shockwave Player,” Adobe’s advisory said. Secunia advised Shockwave Player users to avoid untrusted Websites, while Adobe recommended that users ensure that their machines are fully patched. According to Adobe, the vulnerability exists in Shockwave Player 11.5.8.612 and earlier, and could be exploited to “cause a crash and potentially allow an attacker to take control of the affected system.”Īt the moment, Adobe said it is “not aware of any attacks” exploiting the bug, though “details about the vulnerability have been disclosed publicly.”Ī Secunia advisory about the Shockwave vulnerability said it is caused by “an array-indexing error in the handling of a certain record value in a ‘rcsL’ chunk and can be exploited to use an arbitrary dword in memory as a function pointer via a specially crafted Director file.” Adobe Systems is warning users about a critical bug in Shockwave Player that impacts both Macintosh and Windows computers.Īdobe issued an advisory about the bug Oct.
0 kommentar(er)
