The host is installed with Adobe Shockwave Player before 11.6.0.626 and is prone to a remote code execution vulnerability. A flaw is present in the application, as it is possible to trigger a code path that leads to an incorrect string copy operation when processing "DRCF" chunks. Successful exploitation could allow an attacker to overflow a heap buffer and execute arbitrary code.