{"vuid":"VU#437212","idnumber":"437212","name":"Adobe Macromedia Shockwave Player ActiveX installer buffer overflow vulnerability","keywords":["Adobe","Macromedia","Shockwave","stack based","buffer overflow","ActiveX control","installer","sw.cab","download.dll"],"overview":"The ActiveX installer for Adobe Macromedia Shockwave contains a buffer overflow, which may allow a remote unauthenticated attacker to execute arbitrary code on a vulnerable system.","clean_desc":"Shockwave Player Adobe Macromedia Shockwave Player is software that plays active web content developed in Macromedia Director. Shockwave Player is available as an ActiveX control for Internet Explorer and as a plug-in for other web browsers. Shockwave Installer Internet Explorer users can install the Shockwave Player through use of an ActiveX installer. Upon visiting a web site that provides Shockwave content, the user will be prompted to install the Shockwave Player through the ActiveX mechanism. Users of web browsers other than Internet Explorer, which do not support ActiveX, are required to run a stand-alone Shockwave Player installer to view Shockwave content. The problem The ActiveX installer for Shockwave contains a buffer overflow vulnerability.","impact":"By convincing a user to view a specially crafted HTML document (for example, a web page) and to accept the Shockwave Player ActiveX installer prompt, an attacker may be able to execute arbitrary  code with the privileges of the user.","resolution":"","workarounds":"Do not install ActiveX controls from untrusted web sites Although the Shockwave installer that is currently available from the macromedia.com web site does not contain the vulnerability, an attacker may choose to host the vulnerable version of the ActiveX installer. This ActiveX control may appear as valid and signed by Macromedia, Inc. Do not install ActiveX controls from untrusted web sites. Disable ActiveX Disabling ActiveX controls in the Internet Zone (or any zone used by an attacker) appears to prevent exploitation of this vulnerability. Instructions for disabling ActiveX in the Internet Zone can be found in the \"Securing Your Web Browser\" document and the Malicious Web Scripts FAQ. Note that disabling ActiveX controls in the Internet Zone will reduce the functionality of some web sites.","sysaffected":"","thanks":"This vulnerability was disclosed by Adobe, who in turn credit Zero Day Initiative with reporting the vulnerability.","author":"This document was written by Will Dormann.","public":["http://www.macromedia.com/devnet/security/security_zone/apsb06-02.html","http://www.zerodayinitiative.com/advisories/ZDI-06-002.html","http://secunia.com/advisories/19009/","http://www.auscert.org.au/6064"],"cveids":["CVE-2005-3525"],"certadvisory":"","uscerttechnicalalert":null,"datecreated":"2006-02-26T16:17:04Z","publicdate":"2006-02-23T00:00:00Z","datefirstpublished":"2006-02-28T18:51:52Z","dateupdated":"2006-02-28T18:57:26Z","revision":10,"vrda_d1_directreport":"0","vrda_d1_population":"3","vrda_d1_impact":"3","cam_widelyknown":"15","cam_exploitation":"0","cam_internetinfrastructure":"8","cam_population":"10","cam_impact":"15","cam_easeofexploitation":"3","cam_attackeraccessrequired":"20","cam_scorecurrent":"3.88125","cam_scorecurrentwidelyknown":"4.725","cam_scorecurrentwidelyknownexploited":"8.1","ipprotocol":"","cvss_accessvector":"","cvss_accesscomplexity":"","cvss_authentication":null,"cvss_confidentialityimpact":"","cvss_integrityimpact":"","cvss_availabilityimpact":"","cvss_exploitablity":null,"cvss_remediationlevel":"","cvss_reportconfidence":"","cvss_collateraldamagepotential":"","cvss_targetdistribution":"","cvss_securityrequirementscr":"","cvss_securityrequirementsir":"","cvss_securityrequirementsar":"","cvss_basescore":"","cvss_basevector":"","cvss_temporalscore":"","cvss_environmentalscore":"","cvss_environmentalvector":"","metric":3.88125,"vulnote":null}