Check Point Advisories

Adobe Flash Player SWF Tag Size Mismatch Vulnerabilities (CVE-2011-2453; CVE-2016-4175; CVE-2016-4179)

Check Point Reference: CPAI-2012-098
Date Published: 19 Mar 2012
Severity: High
Last Updated: 20 Jul 2016
Industry Reference:CVE-2011-2453
Protection Provided by:

Security Gateway
R80, R77, R76, R75, R71, R70

Who is Vulnerable?
Vulnerability Description Multiple vulnerabilities have been discovered in Adobe Shockwave files (SWF).The vulnerabilities are due to an error while parsing SWF files containing abnormally sized control and definition tags. Remote attackers could exploit these vulnerabilities by enticing target users to open SWF files containing such malformed tags. Successful exploitation could lead to system compromise.

Protection Overview

This protection detects and blocks SWF files containing malformed tags.

In order for the protection to be activated, update your Security Gateway product to the latest IPS update.For information on how to update IPS, go to SBP-2006-05, click on Protection tab and select the version of your choice.

Security Gateway R80 / R77 / R76 / R75 / R71 / R70

  1. In the IPS tab, click Protections and find the Adobe Flash Player SWF Tag Size Mismatch Vulnerabilities protection using the Search tool and Edit the protection's settings.
  2. Install policy on all modules.

This protection's log will contain the following information:

Attack Name:  Adobe Products Violation.
Attack Information:  Adobe Flash Player SWF tag size mismatch vulnerabilities