CVE-2012-0758 Adobe Shockwave Player Parsing cupt atom heap overflow

Discover: instruder of code audit labs of vulnhunt.com

CAL: CAL-2011-0071

CVE: CVE-2012-0758

1 Affected Products

=================

adobe shockwave 11.6.3.633

adobe Shockwave 11.6.1.629 and prior

2 Vulnerability Details

=====================

When adobe shockwave player parsing a dir type file,

it takes a dword from the dir file,and then take some

Computing this computing will leding to Integer overflow,

allocate a small memory,this Cause a heap overflow.

3 Analysis

=========

asm in dirapi.dll 11.6.1.629

c code like

==================

4 Exploitable?

============

Successfully exploited this vulnerability could lead to arbitrary code execution.

5 Crash info:

===============

6 About Code Audit Labs:

=====================

Code Audit Labs secure your software,provide Professional include source

code audit and binary code audit service.

Code Audit Labs:” You create value for customer,We protect your value”
http://www.VulnHunt.com http://blog.vulnhunt.com http://t.qq.com/vulnhunt http://weibo.com/vulnhunt