1218880 - Plugin block request: Shockwave for Director 12.2.0.162

Status: RESOLVED FIXED

(Toolkit :: Blocklist Policy Requests, defect)

Description

[guigs [:guigs] PST (please needinfo me!)]

Plugin name: Adobe Shockwave Player
Plugin versions to block: 12.2.0.162
Applications, versions, and platforms affected: Mac and Windows all
Block severity: hard

How does this plugin appear in about:plugins?
Mac
    File: DirectorShockwave.plugin
    Version: 12.2.1r162
    Description: Shockwave for Director

Homepage and other references and contact info: 
https://helpx.adobe.com/security/products/shockwave/apsb15-26.html

Reasons:
"Adobe has released a security update for Adobe Shockwave Player. This update addresses a critical vulnerability that could potentially allow an attacker to take control of the affected system.
"

Comment 1

[Jorge Villalobos [:jorgev] (he/him)]

Looks like this only affects Windows and Mac OS. I need the information on how this plugin appears on Windows so I can continue with the block.

Comment 2

[Kamil Jozwiak [:kjozwiak]]

Using Windows 10 x64 VM:
=======================

Shockwave for Director
File: np32dsw_1220162.dll
Path: C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1220162.dll
Version: 12.2.0.162
State: Enabled
Adobe Shockwave for Director Netscape plug-in, version 12.2

Shockwave for Director
File: np32dsw_1221171.dll
Path: C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1221171.dll
Version: 12.2.1.171
State: Enabled
Adobe Shockwave for Director Netscape plug-in, version 12.2.1.171

Shockwave for Director
File: np32dsw_1217157.dll
Path: C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1217157.dll
Version: 12.1.7.157
State: Enabled
Adobe Shockwave for Director Netscape plug-in, version 12.1.7.157

Comment 3

[Jorge Villalobos [:jorgev] (he/him)]

Blocked:

Shockwave for Director 12.2.0.162 and earlier, Mac OS X (click-to-play)
https://addons.mozilla.org/blocked/p1055

Shockwave for Director 12.2.0.162 and earlier, Windows (click-to-play) 
https://addons.mozilla.org/blocked/p1054

Comment 4

[diogoribeiro17messi]

[Tracking Requested - why for this release]: