# MA-170.062009: MyCERT Alert - Adobe Shockwave Player Director File Parsing Pointer Overwrite Vulnerability

**Date:** 02 Jul 2009  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-170.062009  
**Advisory ID:** MA-170.062009

---

#### **1.0 Introduction**
A critical vulnerability has been identified in Adobe Shockwave Player. This vulnerability would cause the application to crash and could potentially allow an attacker to take control of the affected system due to a memory dereferencing error while parsing Adobe Director files.
**2.0 Impact**
By exploiting this vulnerability, an attacker could execute arbitrary code on vulnerable installations of Adobe Shockwave Player and gain the same privilege as the user. The attack can be lunched via local or remote by abusing Adobe Shockwave web browser plugin.
**3.0 Affected Products**
Shockwave Player version 11.5.0.596 and earlier versions.
**4.0 Recommendation**
Users are recommended to uninstall Shockwave version 11.5.0.596 and earlier, restart, and install Shockwave version 11.5.0.600. Users can obtain the update from the following URL: <http://get.adobe.com/shockwave/> 
Generally, MyCERT advises the users of this product to be updated with the latest security announcements by the vendor. Users who receive suspicious SWF file or URL can forward them to MyCERT for further analysis. MyCERT can be reached through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#6b0612080e191f2b0612080e191f4504190c450612)
Phone : +603 89926969 or 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : +60 19 2813801 (24x7 SMS reporting)
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0 References**
- <http://www.adobe.com/support/security/bulletins/apsb09-08.html>
- <http://www.securityfocus.com/bid/35469/references>
- <http://www.zerodayinitiative.com/advisories/ZDI-09-044/>