RULE(RULE ID:305289)

Rule General Information
Release Date: 2010-10-20
Rule Name: Adobe Shockwave Director tSAC Chunk Parsing Memory Corruption exploit Vulnerability (CVE-2010-2866)
Severity:
CVE ID:
Rule Protection Details
Description: Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a count value associated with an "undocumented structure" and the tSAC chunk in a Director movie.
Impact: Remote code execution
Affected OS: Windows
Reference: CVE-2010-2866
SecurityFocusBID:42665
SecurityAdvisory:SA41065
APSB10-20
Solutions
Update vendor's patch.