Adobe Shockwave Player Director文件分析ATOM size无限循环漏洞

CVE ID: CVE-2010-1282 Code Audit Labs http://www.vulnhunt.com 在Adobe’s Shockwave Player软件中 发现一个漏洞，触发该漏洞需要用户访问一个畸形的web页面。 该漏洞存在于当shockwave player分析atom size时，不当处理导致代码无限循环。 成功利用能导致cpu 100%,造成拒绝服务攻击。 11.5.2.602 ,11.5.6.606 and prior 厂商补丁： adobe --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版...

Adobe Shockwave Player 11.5.6.606 (DIR) Multiple Memory Vulnerabilities

No description provided by source. / Title: Adobe Shockwave Player 11.5.6.606 DIR Multiple Memory Vulnerabilities Vendor: Adobe Systems Incorporated Product web page: http://www.adobe.com Summary: Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now...

ZDI-10-088: Adobe Shockwave Player 3D Parsing Memory Corruption Vulnerability

ZDI-10-088: Adobe Shockwave Player 3D Parsing Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-088 May 11, 2010 -- CVE ID: CVE-2010-1283 -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave Player -- TippingPointTM IPS Customer Protection: TippingPoin...

[CAL-20100204-1]Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability

CAL-20100204-1Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability Affected Products ================= 11.5.2.602 ,11.5.6.606 and prior CVE ID: CVE-2010-1282 CAL ID: CAL-20100204-1 Vulnerability Details ===================== Code Audit Labs http://www.vulnhunt.com ha...

iDefense Security Advisory 05.11.10: Abobe Shockwave Player Heap Memory Indexing Vulnerability

iDefense Security Advisory 05.11.10 http://labs.idefense.com/intelligence/vulnerabilities/ May 11, 2010 I. BACKGROUND Adobe Shockwave Player is a popular Web browser plugin. It is available for multiple Web browsers and platforms, including Windows, and MacOS. Shockwave Player enables Web browser...

Adobe Shockwave Player 11.5.6.606 (DIR) Multiple Memory Vulnerabilities

Summary Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to some of the best the Web has to offer - including dazzling 3D games and entertainment, interactive product demonstrations, and online learning applications. Shockwave Player...

Adobe Shockwave Player 3D Model Buffer Overflow Vulnerabilities

This host has Adobe Shockwave Player installed and is prone to Buffer Overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeshockwaveplayerbofvulnjan10.nasl 5263 2017-02-10 13:45:51Z teissa $ Adobe Shockwave Player 3D Model Buffer Overflow Vulnerabilities Authors: Antu Sanadi Copyright...

Adobe Shockwave Player 3D Model Buffer Overflow Vulnerabilities

Adobe Shockwave Player is prone to buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Integer overflow

Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via 1 an unspecified block type in a Shockwave file, leading to a heap-based buffer overflow; and might allow remote attackers to execute arbitrary code via 2 an unspecified 3D...

Heap overflow

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file...

CVE-2009-4002

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file...

CVE-2009-4003

Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via 1 an unspecified block type in a Shockwave file, leading to a heap-based buffer overflow; and might allow remote attackers to execute arbitrary code via 2 an unspecified 3D...

CVE-2009-4003

Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via 1 an unspecified block type in a Shockwave file, leading to a heap-based buffer overflow; and might allow remote attackers to execute arbitrary code via 2 an unspecified 3D...

CVE-2009-4002

Adobe Shockwave Player is affected by CVE-2009-4002 (buffer overflow in 3D model processing) in versions prior to 11.5.6.606. The vulnerability allows remote code execution and is discussed alongside CVE-2009-4003 (integer overflows) in multiple advisories. Affected software: Shockwave Player on ...

CVE-2009-4003

CVE-2009-4003 concerns multiple integer overflow vulnerabilities in Adobe Shockwave Player prior to 11.5.6.606, reported across several sources. The flaws occur during Shockwave processing (notably in 3D blocks) and can lead to heap memory corruption and potential remote code execution. Affected ...

CVE-2009-4002

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file...

Secunia Research: Adobe Shockwave Player 3D Model Buffer Overflow

====================================================================== Secunia Research 20/01/2010 - Adobe Shockwave Player 3D Model Buffer Overflow - ====================================================================== Table of Contents Affected...

Critical Flaws Haunt Adobe Shockwave Player

Adobe’s run on the patching treadmill continued this week with a “critical” update to fix a pair of code execution holes in its Shockwave Player. The vulnerabilities affect Adobe Shockwave Player 11.5.2.602 and earlier versions, on the Windows and Mac operating systems. According to an Adobe...

Shockwave Player < 11.5.6.606 Multiple Vulnerabilities (APSB10-03)

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.6.606. As such, it is potentially affected by multiple issues : - A buffer overflow vulnerability that could potentially lead to code execution. CVE-2009-4002 - Multiple integer overflow vulnerabiliti...

Adobe Releases Shockwave Player Update

Adobe has released an update for Shockwave Player to address multiple vulnerabilities. These vulnerabilities affect Adobe Shockwave Player 11.5.2.602 and earlier versions for Windows and Macintosh. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code. US-CERT...