The Director module (dirapi.dll) in Adobe Shockwave Player contains a memory-corruption flaw in how it parses the rcsL chunk of Director movie files, where an attacker-controlled field value is used as a pointer offset. An attacker who can get a victim to open a crafted Director movie can execute arbitrary code or cause a denial of service, with no authentication or configuration required beyond the victim processing the malicious file.
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in the wild in October 2010. NOTE: some of these details are obtained from third party information.
First seen exploited 5 days before it was disclosed. Public exploit code (Exploit-DB) was available 5 days before disclosure.
No high- or medium-confidence techniques. The 1 available link are lower confidence and listed below.
These come from early or generic mappings, text matching, or contradict this CVE’s details (for example a public-facing technique on a bug that needs a user to open a file). Shown for completeness.
Reports are matched by finding the exact id CVE-2010-3653 in their text; nobody has reviewed the match. One passage is shown per report, at most 320 characters, linked to the original.
Adobe to add new exploit mitigations to Flash Player in recent years, including adopting the Control Flow Guard technology in Windows 10, which makes memory 0.000% 0.005% 0.010% 0.015% 0.020% 0.025% 0.030% 3Q15 4Q15 1Q16 2Q16 Encounter rate (percent of all reporting computers) Win32/ShellCode CVE-2010-3653…
2 passages name itOriginal (opens in a new tab) ↗