CVE-2013-0636

Adobe Shockwave Player is affected by CVE-2013-0636 (stack-based buffer overflow) and CVE-2013-0635 (memory corruption) with exploitation leading to arbitrary code execution. The vulnerability applies to Shockwave Player versions before 12.0.0.112, and per APSB13-06 also to Windows/macOS builds

CVE-2013-0635

Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2013-0636

Stack-based buffer overflow in Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code via unspecified vectors...

CVE-2013-0635

Adobe Shockwave Player is affected by CVE-2013-0635. The vulnerability exists in versions prior to 12.0.0.112 and can allow arbitrary code execution or cause a denial of service via memory corruption. The issue is triggered when a user opens a malicious Shockwave file, with the exact attack vecto...

Adobe Investigating Reports of Reader Zero-Day Exploit

UPDATE-Attackers are using malicious PDFs posing as an application for an international travel visa to exploit a zero-day vulnerability in Adobe Reader and Acrobat, a researcher at FireEye told Threatpost today. The exploit is the first to escape the sandbox included in Reader X and above. Zheng...

Shockwave Player <= 11.6.8.638 Multiple Vulnerabilities (APSB13-06)

The remote Windows host contains a version of Adobe's Shockwave Player that is equal to or earlier than 11.6.8.638 and is, therefore, potentially affected by the following vulnerabilities : - An unspecified memory corruption error exists that could lead to denial or potentially arbitrary code...

Deja Vu: Another Adobe Flash Player Security Update Released

What’s better than one Flash Player update a week? Why two, of course. Adobe released its regularly scheduled security updates today, including another set of fixes for its ubiquitous Flash Player, less than a week after an emergency patch took care of two zero-day vulnerabilities being exploited...

Adobe Shockwave Player Multiple Vulnerabilities Jan-2013 (Mac OS X)

This host is installed with Adobe Shockwave Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeshockwaveplayermultvulnjan13macosx.nasl 6093 2017-05-10 09:03:18Z teissa $ Adobe Shockwave Player Multiple Vulnerabilities Jan-2013 Mac OS X Authors: Rachana Shetty...

Adobe Shockwave Player Multiple Vulnerabilities (Jan 2013) - Windows

Adobe Shockwave Player is prone to multiple vulnerabilities. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Adobe Shockwave Player Multiple Vulnerabilities Jan-2013 (Windows)

This host is installed with Adobe Shockwave Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeshockwaveplayermultvulnjan13win.nasl 7584 2017-10-26 12:15:30Z cfischer $ Adobe Shockwave Player Multiple Vulnerabilities Jan-2013 Windows Authors: Rachana Shetty...

CVE-2012-6271

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie that contains an Xtra URL, as demonstrated by a URL for an outdated Xtra...

CVE-2012-6270

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of a Shockwave Player 10.4.0.025 compatibility feature via a crafted HTML document that references Shockwave content with a certain compatibility parameter, related to a "downgrading" attack...

Design/Logic Flaw

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie that contains an Xtra URL, as demonstrated by a URL for an outdated Xtra...

Design/Logic Flaw

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of a Shockwave Player 10.4.0.025 compatibility feature via a crafted HTML document that references Shockwave content with a certain compatibility parameter, related to a "downgrading" attack...

CVE-2012-6271

Adobe Shockwave Player (Windows and Mac OS X) up to version 11.6.8.638 is affected by CVE-2012-6271: a Shockwave movie containing an Xtra URL can trigger installation of arbitrary signed Xtras, which can allow remote code execution. Root cause described in the CVE entry is the ability to install ...

CVE-2012-6270

CVE-2012-6270 concerns Adobe Shockwave Player up to version 11.6.8.638. A crafted HTML document referencing Shockwave content with a specific compatibility parameter can trigger installation of the Shockwave 10.4.0.025 compatibility feature, enabling a “downgrading” scenario. Publicly available s...

CVE-2012-6270

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of a Shockwave Player 10.4.0.025 compatibility feature via a crafted HTML document that references Shockwave content with a certain compatibility parameter, related to a "downgrading" attack...

CVE-2012-6271

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie that contains an Xtra URL, as demonstrated by a URL for an outdated Xtra...

Adobe Shockwave player vulnerable to downgrading

Overview Adobe Shockwave Player may automatically install a legacy version of the runtime, which can increase the attack surface of systems that have Shockwave installed. Description Adobe Macromedia Shockwave Player is software that plays active web content developed in Macromedia and Adobe...

Adobe Shockwave player provides vulnerable Flash runtime

Overview Adobe Shockwave Player 12.1.1.151 and earlier versions on the Windows and Macintosh operating systems provide a vulnerable version of the Flash runtime. Description Adobe Macromedia Shockwave Player is software that plays active web content developed in Macromedia and Adobe Director...