CVE:CVE-2011-0561
CNNVD:CNNVD-201102-182
Adobe Shockwave Player 是专门播放使用Director Shockwave Studio制作的网页的外挂软件。
Adobe Shockwave Player 10.2.152.26之前版本中存在缓冲区溢出漏洞。攻击者可以借助未明向量执行任意代码或者导致拒绝服务(内存破坏)。
solution:Upgrade adobe flash_player to a higher version than 10.2.152,6.0.21.0,6.0.79,7.0,7.0.1,7.0.14.0,7.0.19.0,7.0.24.0,7.0.25,7.0.53.0,7.0.60.0,7.0.61.0,7.0.63,7.0.66.0,7.0.67.0,7.0.68.0,7.0.69.0,7.0.70.0,7.0.73.0,7.1,7.1.1,7.2,8.0,8.0.22.0,8.0.24.0,8.0.33.0,8.0.34.0,8.0.35.0,8.0.39.0,8.0.42.0,9.0,9.0.16,9.0.18d60,9.0.20,9.0.20.0,9.0.28,9.0.28.0,9.0.31,9.0.31.0,9.0.45.0,9.0.47.0,9.0.48.0,9.0.112.0,9.0.114.0,9.0.115.0,9.0.124.0,9.0.125.0,9.0.151.0,9.0.152.0,9.0.155.0,9.0.159.0,9.0.246.0,9.0.260.0,9.0.262.0,9.0.277.0,9.0.283.0,9.125.0,10.0.0.584,10.0.12.10,10.0.12.36,10.0.15.3,10.0.22.87,10.0.32.18,10.0.42.34,10.0.45.2,10.1.52.14.1,10.1.52.15,10.1.53.64,10.1.82.76,10.1.85.3,10.1.92.8,10.1.92.10,10.1.95.1,10.1.95.2,10.1.102.64,and avoid the version (,10.2.152],6.0.21.0,6.0.79,7.0,7.0.1,7.0.14.0,7.0.19.0,7.0.24.0,7.0.25,7.0.53.0,7.0.60.0,7.0.61.0,7.0.63,7.0.66.0,7.0.67.0,7.0.68.0,7.0.69.0,7.0.70.0,7.0.73.0,7.1,7.1.1,7.2,8.0,8.0.22.0,8.0.24.0,8.0.33.0,8.0.34.0,8.0.35.0,8.0.39.0,8.0.42.0,9.0,9.0.16,9.0.18d60,9.0.20,9.0.20.0,9.0.28,9.0.28.0,9.0.31,9.0.31.0,9.0.45.0,9.0.47.0,9.0.48.0,9.0.112.0,9.0.114.0,9.0.115.0,9.0.124.0,9.0.125.0,9.0.151.0,9.0.152.0,9.0.155.0,9.0.159.0,9.0.246.0,9.0.260.0,9.0.262.0,9.0.277.0,9.0.283.0,9.125.0,10.0.0.584,10.0.12.10,10.0.12.36,10.0.15.3,10.0.22.87,10.0.32.18,10.0.42.34,10.0.45.2,10.1.52.14.1,10.1.52.15,10.1.53.64,10.1.82.76,10.1.85.3,10.1.92.8,10.1.92.10,10.1.95.1,10.1.95.2,10.1.102.64