A Windows exploit for a previously undisclosed hole in Adobe’s Shockwave player has been released. The exploit currently only works under Windows XP SP3 and triggered a browser crash when tested with Windows 7 and Internet Explorer. The hole is caused by a flaw in the code for processing specially crafted data blocks in Director files. Adobe has confirmed the flaw for version 11.5.8.612 and earlier versions under Windows and Mac OS X. There is as yet no update, but vendor is reportedly working on a solution to the problem.”]
Source: http://www.h-online.com/security/news/item/Zero-day-exploit-for-Adobe-Shockwave-1123414.html