CVE-2010-3653

This Metasploit module exploits a memory corruption vulnerability in Adobe Shockwave via an undocumented rcsL chunk in Director movies (.DIR). It delivers a payload through a malicious HTML page and embedded Shockwave object, targeting Windows systems.

This is a detailed advisory and analysis of a memory corruption vulnerability in Adobe Shockwave Player (CVE-2010-3653), focusing on the rcsL chunk handling. It includes disassembly and technical explanation but lacks executable exploit code.

This Metasploit module exploits a memory corruption vulnerability in Adobe Shockwave via an undocumented rcsL chunk in Director movies (.DIR). It delivers a malicious .DIR file and uses heap spraying to achieve remote code execution.