|Check Point Reference:||CPAI-2012-098|
|Date Published:||19 Mar 2012|
|Last Updated:||20 Jul 2016|
|Protection Provided by:||
|Who is Vulnerable?|
|Vulnerability Description||Multiple vulnerabilities have been discovered in Adobe Shockwave files (SWF). The vulnerabilities are due to an error while parsing SWF files containing abnormally sized control and definition tags. Remote attackers could exploit these vulnerabilities by enticing target users to open SWF files containing such malformed tags. Successful exploitation could lead to system compromise.|
This protection detects and blocks SWF files containing malformed tags.
In order for the protection to be activated, update your Security Gateway product to the latest IPS update. For information on how to update IPS, go to SBP-2006-05, click on Protection tab and select the version of your choice.
This protection's log will contain the following information:
Attack Name: Adobe Products Violation.
Attack Information: Adobe Flash Player SWF tag size mismatch vulnerabilities