Integer overflow

Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director before 11.5.7.609 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted .dir file that triggers an invalid read operation...

Memory corruption

The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafte...

CVE-2010-0130

Integer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via a crafted .dir aka Director file...

CVE-2010-1283

Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir aka Director files, which allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a modified field in a 0xFFFFFF49 record...

CVE-2010-1282

Adobe Shockwave Player before 11.5.7.609 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted ATOM size in a .dir aka Director file...

CVE-2010-1280

Adobe Shockwave Player is affected by CVE-2010-1280: versions prior to 11.5.7.609 are vulnerable to remote code execution or memory corruption when processing specially crafted .dir files due to an erroneous dereference and a specific Shock.dir file. Affected product: Adobe Shockwave Player. Root...

CVE-2010-0986

Adobe Shockwave Player is affected by CVE-2010-0986 (asset entry processing issue) leading to memory corruption and possible arbitrary code execution. The vulnerability affects Shockwave Player prior to version 11.5.7.609. Secunia’s advisory notes remediation to update to 11.5.7.609. Other source...

CVE-2010-0130

CVE-2010-0130 is an Adobe Shockwave Player integer overflow vulnerability disclosed for vulnerability in Shockwave Player prior to 11.5.7.609. The issue arises when processing Director (.dir) files, enabling remote code execution. Affected software: Adobe Shockwave Player (versions before 11.5.7....

CVE-2010-0128

CVE-2010-0128 affects Adobe Shockwave Player < 11.5.7.609 and Adobe Director

CVE-2010-0986

Adobe Shockwave Player before 11.5.7.609 does not properly process asset entries, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted Shockwave file...

CVE-2010-0987

Adobe Shockwave Player contains a heap-based buffer overflow (CVE-2010-0987) exploitable via crafted embedded fonts in Shockwave files. Affected product: Shockwave Player before version 11.5.7.609. Connected sources corroborate the vulnerability as part of multiple font-related shocks and describ...

CVE-2010-1281

iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted .dir aka Director file...

CVE-2010-1292

The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafte...

CVE-2010-1292

CVE-2010-1292 affects Adobe Shockwave Player prior to 11.5.7.609. The vulnerability arises in the pami RIFF chunk parsing, where a value from a file is not validated before being used in file-pointer calculations, enabling a remote attacker to execute arbitrary code or cause memory corruption via...

CVE-2010-1281

CVE-2010-1281 affects Adobe Shockwave Player (pre-11.5.7.609). The vulnerability is in iml32.dll where a value read from a file used in Director file-pointer calculations is not validated, enabling remote code execution or memory corruption via a crafted .dir file. Exploitation requires user inte...

CVE-2010-0129

Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted .dir aka Director file that triggers an array index error...

CVE-2010-1280

Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted .dir aka Director file, related to 1 an erroneous dereference and 2 a certain Shock.dir file...

CVE-2010-0129

Adobe Shockwave Player is affected by CVE-2010-0129 due to multiple integer overflows leading to memory corruption via specially crafted Director (.dir) files. The vulnerability affects Shockwave Player prior to 11.5.7.609 and can enable remote memory corruption or potential arbitrary code execut...

PT-2010-1946 · Adobe · Shockwave Player

Name of the Vulnerable Software and Affected Versions: Adobe Shockwave Player versions prior to 11.5.7.609 Description: The issue is related to an integer overflow that might allow remote attackers to execute arbitrary code via a crafted .dir aka Director file. Recommendations: For versions prior...

Secunia Research: Adobe Shockwave Player Array Indexing Vulnerability

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player Array Indexing Vulnerability - ====================================================================== Table of Contents Affected...