Secunia Research has discovered a vulnerability in Adobe Shockwave Player, which can be exploited by malicious people to compromise a user’s system. The vulnerability is caused by a boundary error when processing Shockwave 3D models. This can be exploited to cause a heap-based buffer overflow via a specially crafted Shockwave file. Successful exploitation allows execution of arbitrary code. Version 11.5.2.602 is affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/85432/secunia-asp3dbo.txt
Source: https://packetstormsecurity.com/files/85432/Adobe-Shockwave-Player-3D-Model-Buffer-Overflow.html