Adobe Shockwave Player Director文件解析远程代码执行漏洞

Bugraq ID: 35469 CVE ID：CVE-2009-1860 Adobe Shockwave Player是一款用于播放使用Director Shockwave Studio制作的网页的外挂软件。 Adobe Shockwave Player处理Director文件存在一个严重的安全问题，远程攻击者可以利用漏洞完全控制受此漏洞影响的系统。 当Shockwave player尝试装载特殊构建的Director文件时，在内存引用时恶意值可覆盖4字节内存，导致以登录用户进程权限执行任意指令。 Adobe Shockwave Player 11.5 596 升级到Adobe...

CVE-2009-2186

Adobe Shockwave Player is affected by CVE-2009-2186, an unspecified vulnerability that allows remote code execution in versions before 11.0.0.465. The issue is related to an older vulnerability (CVE-2009-1860) which was previously resolved in 11.0.0.465. Affected product: Shockwave Player (Window...

CVE-2009-2186

Unspecified vulnerability in Adobe Shockwave Player before 11.0.0.465 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2009-1860, related to an older issue that "was previously resolved in Shockwave Player 11.0.0.465."...

CVE-2009-1860

Unspecified vulnerability in Adobe Shockwave Player before 11.5.0.600 allows remote attackers to execute arbitrary code via crafted Shockwave Player 10 content...

CVE-2009-1860

Adobe Shockwave Player is affected by CVE-2009-1860, a remote code execution vulnerability triggered by loading a crafted Adobe Director file. The issue affects Shockwave Player versions up to 11.5.0.596, with remediation provided by upgrading to 11.5.0.600 (Windows). The vulnerability enables co...

Adobe Fixes Critical Shockwave Vulnerability

Adobe has patched a critical security flaw in its Shockwave Player software which could enable an attacker to gain complete control of affected machines. The vulnerability affects version 11.5.0.596 and earlier of Shockwave. Adobe has released a new version of the software, version 11.5.0.600, an...

CVE-2009-2186: Undefined Security Weakness

Unspecified vulnerability in Adobe Shockwave Player before 11.0.0.465 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2009-1860, related to an older issue that "was previously resolved in Shockwave Player 11.0.0.465."...

CVE-2009-1860: Undefined Security Weakness

Unspecified vulnerability in Adobe Shockwave Player before 11.5.0.600 allows remote attackers to execute arbitrary code via crafted Shockwave Player 10 content...

Adobe Shockwave Player Director File Parsing Pointer Overwrite Vulnerability

This vulnerability allows remote attackers to execute code on vulnerable installations of Adobe's Shockwave Player. User interaction is required in that a user must visit a malicious web site. The specific flaw exists when the Shockwave player attempts to load a specially crafted Adobe Director...

US-CERT Technical Cyber Security Alert TA06-075A -- Adobe Macromedia Flash Products Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-075A Adobe Macromedia Flash Products Contain Vulnerabilities Original release date: March 16, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows, Apple Mac OS X,...

ShockWave Player ActiveX Installer Buffer Overflow

The remote host contains an ActiveX control associated with Macromedia's ShockWave Player installer that has an exploitable stack-based buffer overflow. It may be possible for an attacker to execute arbitrary code on the remote host subject to the user's privileges by tricking a user into visitin...

CVE-2005-3525

CVE-2005-3525 corresponds to a stack-based buffer overflow in the Shockwave Player ActiveX installer (ActiveX control used to install Shockwave). The flaw exists in the installer ActiveX control and can be exploited by supplying crafted large values to two parameters, enabling remote code executi...

CVE-2005-3525: Undefined Security Weakness

Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and earlier allows remote attackers to execute arbitrary code via crafted large values for unspecified parameters...

CVE-2005-3525

Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and earlier allows remote attackers to execute arbitrary code via crafted large values for unspecified parameters...