Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption related to an \invalid string length vulnerability.\ NOTE: some of these details are obtained from third party information.