Update Protection against Adobe Shockwave Player DIRAPI.dll Denial of Service Vulnerability (APSB10-20)
| Check Point Reference: | CPAI-2010-245 | |
| Date Published: | ||
| Severity: | ||
| Source: | Adobe Security Bulletin APSB10-20 | |
| Industry Reference(s): | CVE-2010-2865 | |
| Protection Provided by: |
Security Gateway
|
|
| Who is Vulnerable? Shockwave Player 11.5.7.609 and earlier versions for Windows and Macintosh | ||
| Vulnerability Description A denial of service vulnerability has been identified in Adobe Shockwave Player. Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. An attacker can exploit this issue via a specially crafted DIR file. A remote attacker may exploit this vulnerability to create a denial of service condition on an affected system. |
||
|
Update/Patch Available Apply Hotfix: Adobe Security Bulletin APSB10-20 |
|
|
Vulnerability Details The vulnerability is due to an error in the module DIRAPI.dll of Adobe Shockwave Player while parsing specially crafted Director files. A remote attacker can exploit this issue by enticing a user to open a malicious DIR file with an overly large length value. Successful exploitation of this vulnerability would create a denial of service condition, causing Internet Explorer to become non-responsive. |
Protection Overview
This protection detects and blocks the transferring of malformed Adobe DIR files over HTTP.
In order for the protection to be activated, update your Security Gateway product to the latest IPS update. For information on how to update IPS, go to SBP-2006-05, Protection taband select the version of your choice.
To configure the defense, select your product from the list below and follow the related protection steps.