Summary [1]
Adobe Shockwave Player 11.5.0.600 and earlier versions on Windows leverages a vulnerable version of the Microsoft Active Template Library (ATL) described in Microsoft Security Advisory (973882). This vulnerability could allow an attacker who successfully exploits the vulnerability to take control of the affected system. Adobe has provided a solution for the reported vulnerability. It is recommended that users update their installations using the instructions provided below. …
Severity rating:
Critical (Remote Code Execution)
Solution:
Update to Shockwave v11.5.1.601 from
http://get.adobe.com/shockwave/
LINKS:
[1] Security update available for Shockwave Player (2009-Jul-28) [Adobe]
[2] Microsoft Security Bulletin MS09-035 – Moderate (2009-Jul-28) [MS]
[1] Security update available for Shockwave Player (2009-Jul-28) [Adobe]
[2] Microsoft Security Bulletin MS09-035 – Moderate (2009-Jul-28) [MS]
CRP09-037
