Free PC Diagnostics
Windows Boot Errors
Secure your PC
Link to us
Five Security Flaws in Adobe Shockwave Player
5 November, 2009
§ This vulnerability affects: Adobe Shockwave Player 126.96.36.1991 and earlier, running on Windows and Macintosh computers
§ How an attacker exploits it: By enticing your users to visit a website containing a malicious Flash file
§ Impact: An attacker can execute code on your computer, potentially gaining control of it
§ What to do: Download and install the latest version of Adobe Shockwave Player
Adobe Shockwave Player displays interactive, animated web content called Shockwave (.SWF) files. According to Adobe, Shockwave Player is installed on some 450 million PCs.
In a security bulletin released late Tuesday, Adobe warned of critical vulnerabilities that affect Adobe Shockwave Player 188.8.131.521 for Windows and Macintosh (as well as all earlier versions). Adobe's bulletin refers to five CVE numbers, which suggests that their update fixes five security vulnerabilities. The bulletin doesn't describe the flaws in much technical detail. However, it does warn that if an attacker can entice one of your users to visit a malicious website containing specially crafted Shockwave (SWF) content, he could exploit this unspecified vulnerability to execute code on that user's computer, with that user's privileges. If your Windows users have local administrator privileges, an attacker could exploit this flaw to gain full control of their PC.
If you deploy Adobe Shockwave throughout your network, we recommend you download and install the latest version as soon as you can.
Adobe has released a new version of Shockwave Player, version 184.108.40.2062. If you use Adobe Flash in your network, we recommend you download and deploy this updated player as soon as possible.
Adobe has released a Shockwave Player update to fix these vulnerabilities.