CVE-2007-5941

Description

Stack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument to the ShockwaveVersion method.

Affected products

• Adobe / shockwave_player

Exploits & proofs of concept

• exploit-dbAdobe Shockwave - 'ShockwaveVersion()' Stack Overflow (PoC)by Elazar

References

• EXPLOIThttps://www.exploit-db.com/exploits/4613
• MISChttp://www.securityfocus.com/bid/26388
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/38359