CVE-2010-0128: Out-of-bounds Write

Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director before 11.5.7.609 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted .dir file that triggers an invalid read operation...

Secunia Research: Adobe Shockwave Player Array Indexing Vulnerability

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player Array Indexing Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2010-1291: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, and CVE-2010-1290...

Adobe Shockwave Player 11.5.6.606 (DIR) Multiple Memory Vulnerabilities

No description provided by source. / Title: Adobe Shockwave Player 11.5.6.606 DIR Multiple Memory Vulnerabilities Vendor: Adobe Systems Incorporated Product web page: http://www.adobe.com Summary: Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now...

Adobe Shockwave Player 11.5.6.606 (DIR) Multiple Memory Vulnerabilities

Exploit for windows platform in category dos / poc ======================================================================= Adobe Shockwave Player 11.5.6.606 DIR Multiple Memory Vulnerabilities ======================================================================= / Title: Adobe Shockwave Player...

Adobe Shockwave Player Director文件分析RCSL指针覆盖漏洞

CVE ID: CVE-2010-1280. Code Audit Labs http://www.vulnhunt.com 在Adobe’s Shockwave Player软件中 发现一个漏洞，该漏洞允许远程攻击者受害者的机器上任意执行代码。 触发该漏洞需要用户访问一个畸形的web页面。 该漏洞存在于当shockwave player分析Director文件时，错误的使用了文件中的一个变量，导致发生4字节的内存被重写。成功利用该漏洞，攻击者可远程控制受害者机器。 11.5.2.602 ,11.5.6.606 and prior 厂商补丁： adobe ---------...

Adobe Shockwave Player Director文件分析整型溢出漏洞

CVE ID: CVE-2010-0129 Code Audit Labs http://www.vulnhunt.com 在Adobe’s Shockwave Player软件中 发现一个漏洞，该漏洞允许远程攻击者受害者的机器上任意执行代码。 触发该漏洞需要用户访问一个畸形的web页面。 该漏洞存在于当shockwave player分析Director文件时，错误的使用了16位的符号整型向32位的符号整型，导致整型过大，随后又导致一个整型溢出。成功利用该漏洞，攻击者可远程控制受害者机器。 11.5.2.602 ,11.5.6.606 and prior 厂商补丁： adobe...

Secunia Research: Adobe Shockwave Player 3D Parsing Memory Corruption

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player 3D Parsing Memory Corruption - ====================================================================== Table of Contents Affected...

Adobe Releases Update for Shockwave Player

Adobe has released a security update to address multiple vulnerabilities in Adobe Shockwave Player 11.5.6.606 and earlier versions for both Windows and Macintosh operating systems. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code. US-CERT encourages users and...

Adobe Shockwave Player 11.5.6.606 - DIR Multiple Memory Vulnerabilities

Adobe Shockwave Player 11.5.6.606 - DIR Multiple Memory Vulnerabilities / Title: Adobe Shockwave Player 11.5.6.606 DIR Multiple Memory Vulnerabilities Vendor: Adobe Systems Incorporated Product web page: http://www.adobe.com Summary: Over 450 million Internet-enabled desktops have installed Adobe...

[CAL-20100204-3]Adobe Shockwave Player Director File Parsing RCSL Pointer Overwrite

CAL-20100204-3Adobe Shockwave Player Director File Parsing RCSL Pointer Overwrite Affected Products ================= 11.5.2.602 ,11.5.6.606 and prior CVE ID: CVE-2010-1280 CAL ID: CAL-20100204-3 Vulnerability Details ===================== Code Audit Labs http://www.vulnhunt.com has discovered a...

Security update available for Shockwave Player

Security update available for Shockwave Player Release date: May 11, 2010 Vulnerability identifier: APSB10-12 CVE number: CVE-2010-0127, CVE-2010-0128, CVE-2010-0129, CVE-2010-0130, CVE-2010-0986, CVE-2010-0987, CVE-2010-1280, CVE-2010-1281, CVE-2010-1282, CVE-2010-1283, CVE-2010-1284,...

ZDI-10-089: Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability

ZDI-10-089: Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-089 May 11, 2010 -- CVE ID: CVE-2010-1292 -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave Player -- TippingPointTM IPS Customer Protection:...

[CAL-20100204-1]Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability

CAL-20100204-1Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability Affected Products ================= 11.5.2.602 ,11.5.6.606 and prior CVE ID: CVE-2010-1282 CAL ID: CAL-20100204-1 Vulnerability Details ===================== Code Audit Labs http://www.vulnhunt.com ha...

ZDI-10-088: Adobe Shockwave Player 3D Parsing Memory Corruption Vulnerability

ZDI-10-088: Adobe Shockwave Player 3D Parsing Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-088 May 11, 2010 -- CVE ID: CVE-2010-1283 -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave Player -- TippingPointTM IPS Customer Protection: TippingPoin...

iDefense Security Advisory 05.11.10: Abobe Shockwave Player Heap Memory Indexing Vulnerability

iDefense Security Advisory 05.11.10 http://labs.idefense.com/intelligence/vulnerabilities/ May 11, 2010 I. BACKGROUND Adobe Shockwave Player is a popular Web browser plugin. It is available for multiple Web browsers and platforms, including Windows, and MacOS. Shockwave Player enables Web browser...

Adobe Shockwave Player Director文件分析ATOM size无限循环漏洞

CVE ID: CVE-2010-1282 Code Audit Labs http://www.vulnhunt.com 在Adobe’s Shockwave Player软件中 发现一个漏洞，触发该漏洞需要用户访问一个畸形的web页面。 该漏洞存在于当shockwave player分析atom size时，不当处理导致代码无限循环。 成功利用能导致cpu 100%,造成拒绝服务攻击。 11.5.2.602 ,11.5.6.606 and prior 厂商补丁： adobe --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版...

[CAL-20100204-2]Adobe Shockwave Player Director File Parsing integer overflow vulnerability

CAL-20100204-2Adobe Shockwave Player Director File Parsing integer overflow vulnerability Affected Products ================= 11.5.2.602 ,11.5.6.606 and prior CVE ID: CVE-2010-0129 CAL ID: CAL-20100204-2 Vulnerability Details ===================== Code Audit Labs http://www.vulnhunt.com has...

Shockwave Player < 11.5.7.609 Multiple Vulnerabilities (APSB10-12)

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.7.609. Such versions are affected by the following issues : - Processing specially crafted FFFFFF45h Shockwave 3D blocks can result in memory corruption. CVE-2010-0127, CVE-2010-1283 - A signedness...

Adobe Shockwave Player 11.5.6.606 - 'DIR' Multiple Memory Vulnerabilities

/ Title: Adobe Shockwave Player 11.5.6.606 DIR Multiple Memory Vulnerabilities Vendor: Adobe Systems Incorporated Product web page: http://www.adobe.com Summary: Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to some of the best the...