CVE-2012-0759 Adobe Shockwave Player Director File Parsing KEY ATOM Pointer Overwrite

Discover: instruder of code audit labs of vulnhunt.com
CAL: CAL-2011-0055
CVE: CVE-2012-0759

1 Affected Products

=================
Test Version：
Adobe Shockeave Player 11.6.3.633
Adobe Shockwave Player 11.6.1.629
and prior

2 Vulnerability Details

=====================

When adobe shockwave player parsing the field of KEY_ATOM of Director File,
it don’t have proper check,this will lead the key atom pointer overwrite.
Successfully exploited this vulnerability will lead to arbitrary code execution.

3 Exploitable?

============
This vulnerability will lead the key atom pointer overwrite
Successfully exploited this vulnerability will lead to arbitrary code execution.

4 About Code Audit Labs:

=====================
Code Audit Labs secure your software,provide Professional include source
code audit and binary code audit service.
Code Audit Labs:” You create value for customer,We protect your value”

http://www.VulnHunt.com

http://blog.vulnhunt.com

http://t.qq.com/vulnhunt

http://weibo.com/vulnhunt