CVE-2010-3653
EXPLOITED IN THE WILDAdobe Shockwave Player < 11.5.9.615 - Remote Code Execution via Crafted rcsL Chunk
Title source: llmExploitation Summary
CVE-2010-3653 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).
EIP tracks 3 public exploits from researchers including Metasploit, Abysssec, David Kennedy, including a Metasploit module exploits/windows/browser/adobe_shockwave_rcsl_corruption.
AI-analyzed exploit summary This Metasploit module exploits a memory corruption vulnerability in Adobe Shockwave via an undocumented rcsL chunk in Director movies (.DIR). It delivers a payload through a malicious HTML page and embedded Shockwave object, targeting Windows systems.
Description
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in the wild in October 2010. NOTE: some of these details are obtained from third party information.
Exploits (3)
This Metasploit module exploits a memory corruption vulnerability in Adobe Shockwave via an undocumented rcsL chunk in Director movies (.DIR). It delivers a payload through a malicious HTML page and embedded Shockwave object, targeting Windows systems.
This is a detailed advisory and analysis of a memory corruption vulnerability in Adobe Shockwave Player (CVE-2010-3653), focusing on the rcsL chunk handling. It includes disassembly and technical explanation but lacks executable exploit code.
This Metasploit module exploits a memory corruption vulnerability in Adobe Shockwave via an undocumented rcsL chunk in Director movies (.DIR). It delivers a malicious .DIR file and uses heap spraying to achieve remote code execution.