Lucene search

[email protected]CVE-2005-3525

HistoryDec 31, 2005 - 5:00 a.m.

CVE-2005-3525

2005-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-3525

adobe

shockwave player

buffer overflow

activex

remote code execution

8.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.404 Medium

EPSS

Percentile

97.3%

JSON

Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and earlier allows remote attackers to execute arbitrary code via crafted large values for unspecified parameters.

CPENameOperatorVersion
adobe:shockwave_playeradobe shockwave playereq5.0
adobe:shockwave_playeradobe shockwave playereq4.0
adobe:shockwave_playeradobe shockwave playereq8.5.1
adobe:shockwave_playeradobe shockwave playereq6.0
adobe:shockwave_playeradobe shockwave playereq10.1.0.11
adobe:shockwave_playeradobe shockwave playereq1.0
adobe:shockwave_playeradobe shockwave playereq2.0
adobe:shockwave_playeradobe shockwave playereq8.0
adobe:shockwave_playeradobe shockwave playereq3.0

CPE	Name	Operator	Version
adobe:shockwave_player	adobe shockwave player	eq	5.0
adobe:shockwave_player	adobe shockwave player	eq	4.0
adobe:shockwave_player	adobe shockwave player	eq	8.5.1
adobe:shockwave_player	adobe shockwave player	eq	6.0
adobe:shockwave_player	adobe shockwave player	eq	10.1.0.11
adobe:shockwave_player	adobe shockwave player	eq	1.0
adobe:shockwave_player	adobe shockwave player	eq	2.0
adobe:shockwave_player	adobe shockwave player	eq	8.0
adobe:shockwave_player	adobe shockwave player	eq	3.0

References

secunia.com/advisories/19009

securityreason.com/securityalert/481

securitytracker.com/id?1015673

www.kb.cert.org/vuls/id/437212

www.macromedia.com/devnet/security/security_zone/apsb06-02.html

www.osvdb.org/23461

www.securityfocus.com/archive/1/425900/100/0/threaded

www.securityfocus.com/bid/16791

www.vupen.com/english/advisories/2006/0716

www.zerodayinitiative.com/advisories/ZDI-06-002.html

exchange.xforce.ibmcloud.com/vulnerabilities/24914

8.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.404 Medium

EPSS

Percentile

97.3%

JSON

Related for CVE-2005-3525

nessus1 cvelist1 securityvulns1 zdi1 cert1