CVE-2005-3525 Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and earlier allows remote attackers to execute arbitrary code via crafted large valu...
HighCVSS 9.3
EPSS 19.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and earlier allows remote attackers to execute arbitrary code via crafted large values for unspecified parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe shockwave player | = 1.0 | No fix listed |
| Adobe shockwave player | = 2.0 | No fix listed |
| Adobe shockwave player | = 3.0 | No fix listed |
| Adobe shockwave player | = 4.0 | No fix listed |
| Adobe shockwave player | = 5.0 | No fix listed |
| Adobe shockwave player | = 6.0 | No fix listed |
| Adobe shockwave player | = 8.0 | No fix listed |
| Adobe shockwave player | = 8.5.1 | No fix listed |
| Adobe shockwave player | = 10.1.0.11 | No fix listed |
References
- 19009 third-party-advisory vendor-advisory
- 481 third-party-advisory
- 1015673 vdb-entry
- VU#437212 third-party-advisory us-government-resource
- www.macromedia.com
- 23461 vdb-entry
- 20060223 ZDI-06-002: Adobe Macromedia ShockWave Code Execution mailing-list
- 16791 vdb-entry
- ADV-2006-0716 vdb-entry
- www.zerodayinitiative.com
- shockwave-activex-installer-bo(24914) vdb-entry