CVE-2009-3465

CVE-2009-3465 affects Adobe Shockwave Player prior to 11.5.2.602. An invalid pointer vulnerability in processing crafted Shockwave content can allow remote code execution via a web page. Impact is arbitrary code execution with network access and no user interaction required per the referenced adv...

CVE-2009-3463

CVE-2009-3463 affects Adobe Shockwave Player prior to 11.5.2.602, with an array index error that could allow remote code execution via crafted Shockwave content on a web site. The issue is part of APSB09-16 and is accompanied by related CVEs (3464–3466). The documented impact is arbitrary code ex...

CVE-2009-3466

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an "invalid string length vulnerability." NOTE: some of these details are obtained from third party information...

CVE-2009-3464

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3465. NOTE: some of these details are obtained from third party information...

CVE-2009-3463

Array index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site. NOTE: some of these details are obtained from third party information...

CVE-2009-3465

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3464. NOTE: some of these details are obtained from third party information...

CVE-2009-3465: Improper Control of Generation of Code

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3464. NOTE: some of these details are obtained from third party information...

Shockwave Player <= 11.5.1.601 Multiple Vulnerabilities (APSB09-16)

The remote Windows host contains a version of Adobe's Shockwave Player that is 11.5.1.601 or earlier. As such, it is affected by multiple issues : - An invalid index vulnerability could lead to code execution. CVE-2009-3463 - Invalid pointer vulnerabilities could lead to code execution...

CVE-2009-3464: Improper Control of Generation of Code

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3465. NOTE: some of these details are obtained from third party information...

CVE-2009-3463: Improper Restriction of Operations within the Bounds of a Memory Buffer

Array index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site. NOTE: some of these details are obtained from third party information...

Adobe Shockwave Player 11.5.1.601 - Multiple Code Executions

Adobe Shockwave Player 11.5.1.601 - Multiple Code Executions argCount = 1 arg1=String2097152, "A" ShockW.PlayerVersion = arg1...

Adobe Shockwave Player 11.5.1.601 - Multiple Code Executions

argCount = 1 arg1=String2097152, "A" ShockW.PlayerVersion = arg1...

CVE-2009-3466: Undefined Security Weakness

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an "invalid string length vulnerability." NOTE: some of these details are obtained from third party information...

Adobe Patches Critical Shockwave Player Flaws

Adobe today released a patch to fix several serious security flaws in its Shockwave Player software. The update, which is rated “critical,” addresses a total of five documented vulnerabilities. The most serious flaw could allow remote code execution attacks against Windows and Mac users. From...

Adobe ShockWave Player 11.5.1.601 Stack Overflow

Application: Adobe ShockWave Player 11.5.1.601 Platforms: Windows XP Professional French SP2 and SP3 crash: IE 6.0.2900.2180 Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details and bug 3 The Code =============== 1...

Adobe Shockwave Player ActiveX Control BOF Vulnerability

This host has Adobe Shockwave Player ActiveX Control installed and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodadobeshockwaveplayerbofvuln.nasl 6530 2017-07-05 06:23:50Z cfischer $ Adobe Shockwave Player ActiveX Control BOF Vulnerability Authors: Nikita MR...

Adobe Shockwave Player ActiveX Control BOF Vulnerability

Adobe Shockwave Player ActiveX Control is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Adobe ShockWave Player SwDir.dll控件堆溢出漏洞

CVE ID: CVE-2009-3244 Adobe Shockwave Player是专门播放使用Director Shockwave Studio制作的网页的外挂软件。 Shockwave Player所提供的SwDir.dll ActiveX控件在播放恶意网页文件时存在堆溢出漏洞，用户受骗打开了包含有超长PlayerVersion属性值的HTML文件时就可能触发这个溢出，导致拒绝服务或执行任意代码。 Adobe Shockwave Player 11.5.1.601 临时解决方法： 为CLSID...

Heap overflow

Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PlayerVersion property value...

CVE-2009-3244

CVE-2009-3244 is a heap-based buffer overflow in the SwDir.dll ActiveX control of Adobe Shockwave Player (11.5.1.601 and earlier). The overflow is triggered by a long PlayerVersion property, allowing a remote attacker to cause a denial of service and possibly execute arbitrary code. Affected plat...