Check Point Reference: | CPAI-2011-258 |
Date Published: | 17 May 2011 |
Severity: | Critical |
Last Updated: | Tuesday 17 May, 2011 |
Source: | |
Industry Reference: | CVE-2011-0627 |
Protection Provided by: |
Security Gateway |
Who is Vulnerable? | |
Vulnerability Description | The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash (SWF) files. A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an integer overflow in the Adobe Flash Player when parsing specially crafted SWF files. A remote attacker can exploit this vulnerability by enticing a user to download and view a Flash file that contains a malicious ActionScript code. Successful exploitation of this vulnerability could cause a crash and potentially allow an attacker to take control of the affected system. |
This protection will detect and block malformed Adobe Flash files that contain ActionScript
In order for the protection to be activated, update your Security Gateway product to the latest IPS update. For information on how to update IPS, go to SBP-2006-05, click on Protection tab and select the version of your choice.
This protection's log will contain the following information:
Attack Name: Adobe Products Violation.
Attack Information: Adobe Flash Player ActionScript ArrayObject memory corruption (APSB11-12)