CVE-2011-0556

The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted PFR1 chunk that leads to an unexpected sign extension and an invalid pointer dereference, a different vulnerability than...

CVE-2010-4190

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a Director movie with a crafted CSWV RIFF chunk that causes an incorrect calculation of an offset for a substructure, which causes an out-of-bounds "seek" of heap...

CVE-2010-2587

The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2588 and CVE-2010-4188...

CVE-2010-2589

CVE-2010-2589 : Integer overflow in the dirapi.dll of Adobe Shockwave Player (pre-11.5.9.620) can lead to arbitrary code execution. Affected versions include 11.5.9.615 and earlier. Remediation: upgrade to 11.5.9.620 per APSB11-01. "

CVE-2010-4188

The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a Director movie with an IFWV chunk with a size field of 0, which is used in the calculation of a file offset and causes invalid data to ...

CVE-2010-4192

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a Director movie with a crafted 3D Assets 0xFFFFFF88 type record that triggers an incorrect memory allocation, a different vulnerability than CVE-2011-0555,...

CVE-2010-4193

Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors...

EUVD-2011-0573

The TextXtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a Director file with a crafted DEMX RIFF chunk that triggers incorrect buffer allocation, a different vulnerability than...

CVE-2011-0569

The CVE-2011-0569 entry concerns Adobe Shockwave Player’s Font Xtra.x32 module. The vulnerability arises in the PFR1 chunk parsing when a 16-bit size value is sign-extended and used in a copy loop, leading to a buffer overflow that can enable arbitrary code execution or memory corruption. Affecte...

CVE-2010-4196

The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors...

CVE-2010-4187

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a malformed chunk in a Director file, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4190, CVE-2010-4191, CVE-2010-4192, and CVE-2010-4306...

CVE-2011-0555

CVE-2011-0555 affects Adobe Shockwave Player (TextXtra.x32). A crafted DEMX RIFF chunk in a Director file triggers incorrect buffer allocation during parsing, leading to remote code execution or heap memory corruption. Affected: Shockwave Player versions before 11.5.9.620. Mitigation: update to 1...

CVE-2010-4093

Adobe Shockwave Player before 11.5.9.620 is vulnerable to remote code execution and memory corruption (CVE-2010-4093 among others) due to an integer overflow/heap memory handling issue when parsing certain records (e.g., FFFFFF88). Publicly documented advisories (APSB11-01) describe a specific ov...

CVE-2010-2587

Adobe Shockwave Player (dirapi.dll) is affected by CVE-2010-2587 and related CVEs due to a parsing flaw in the IFWV chunk size handling that can lead to memory corruption and potentially arbitrary code execution or a denial of service. Affected product/version: Shockwave Player prior to 11.5.9.62...

CVE-2010-4306

CVE-2010-4306 affects Adobe Shockwave Player prior to version 11.5.9.620. The vulnerability allows arbitrary code execution or a denial of service due to memory corruption via unspecified vectors. The entry notes multiple related CVEs and a high-severity impact (NVD base score 9.3). There are no ...

CVE-2010-4192

Adobe Shockwave Player before 11.5.9.620 is affected by CVE-2010-4192, among others, via a crafted Director 3D Assets 0xFFFFFF88 record that triggers an incorrect memory allocation. This can lead to arbitrary code execution or memory corruption and, in some cases, a denial of service. The vulnera...

CVE-2010-4187

Adobe Shockwave Player (pre-11.5.9.620) is affected by CVE-2010-4187 via malformed Director file chunks, enabling arbitrary code execution or memory corruption. This vulnerability is part of a broader set of issues in Shockwave Player (incl. CVEs 2010-2587/8/9, 2010-4092/3/4/5/6, 2011-0555/56/7) ...

CVE-2010-4188

CVE-2010-4188 affects Adobe Shockwave Player and involves a heap-based buffer overflow in the dirapi.dll module caused by processing a Director movie with an IFWV chunk size of 0. This can lead to remote code execution or memory corruption. The vulnerability is part of a set of issues in Shockwav...

CVE-2010-4189

Adobe Shockwave Player contains a vulnerability in the IML32 module used when parsing GIFs within Director movies. A crafted GIF image with a manipulated global color table size triggers an out-of-range pointer offset, enabling memory corruption and potentially arbitrary code execution or a denia...

CVE-2010-4195

Adobe Shockwave Player TextXtra.x32 DEMUX parsing path (TextXtra module) before 11.5.9.620 contains an input validation flaw that can lead to remote arbitrary code execution when processing unspecified input data. Details indicate multiple CVEs (including CVE-2010-4195) under APSB11-01; exact vec...