Lucene search
+L

1872 matches found

Zero Day Initiative
Zero Day Initiative
•added 2011/06/15 12:00 a.m.•54 views

Adobe Shockwave Shockwave 3d Asset.x32 DEMX 0xFFFFFF45 Field Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS4.4AI score0.03575EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2011/06/15 12:00 a.m.•28 views

Adobe Shockwave Shockwave 3d Asset.x32 DEMX Chunk Substructure Count Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS2.5AI score0.05991EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2011/06/15 12:00 a.m.•41 views

Shockwave Player < 11.6.0.626 (APSB11-17)

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.6.0.626. Such versions are potentially affected by the following issues : - Multiple memory corruption vulnerabilities affect the 'Dirapi.dll' component that can result in arbitrary code execution...

9.3CVSS6.8AI score0.08464EPSS
SaveExploits0References44
Positive Technologies
Positive Technologies
•added 2011/06/14 12:00 a.m.•3 views

PT-2011-3599

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.6.0.626 Description The issue is related to multiple integer overflows in Dirapi.dll, which allows attackers to execute arbitrary code. Additionally, there are remote code execution vulnerabilities...

9.3CVSS0.08464EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2011/06/14 12:00 a.m.•6 views

PT-2011-3609

Name of the Vulnerable Software and Affected Versions Adobe Shockwave affected versions not specified Description The issue is related to remote code execution due to a problem in string parsing within the rcsL component. Recommendations At the moment, there is no information about a newer versio...

9.3CVSS0.03575EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2011/06/14 12:00 a.m.•2 views

PT-2011-3603

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.6.0.626 Description The issue is related to multiple buffer overflows in the Shockwave3DAsset component. This allows attackers to execute arbitrary code via unspecified vectors. There are reports of...

9.3CVSS0.05991EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2011/06/14 12:00 a.m.•2 views

PT-2011-3601

Name of the Vulnerable Software and Affected Versions Adobe Shockwave affected versions not specified Description The issue concerns remote code execution vulnerabilities in Adobe Shockwave. Two vulnerabilities are mentioned: one related to an invalid size in a KEY chunk and the other related to...

9.3CVSS0.04296EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2011/06/14 12:00 a.m.•5 views

PT-2011-3604

Name of the Vulnerable Software and Affected Versions Adobe Shockwave affected versions not specified Description The issue concerns remote code execution in Adobe Shockwave, related to the processing of the Trusted Offset Chunk and the parsing of the 0xFFFFFF45 field in 3D asset files...

9.3CVSS0.03575EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2011/06/14 12:00 a.m.•5 views

PT-2011-3610

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.6.0.626 Description The issue is related to an integer overflow in the CursorAsset x32 component, which allows attackers to execute arbitrary code. This is a remote code execution vulnerability that...

9.3CVSS0.04551EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2011/06/14 12:00 a.m.•8 views

PT-2011-3611

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.6.0.626 Description The issue is related to an integer overflow that allows attackers to execute arbitrary code. This is a result of a problem in parsing the AudioMixer structure. Recommendations For...

9.3CVSS0.06136EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2011/06/14 12:00 a.m.•6 views

PT-2011-3602

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.6.0.626 Description The issue is related to multiple buffer overflows in the IML32.dll component of Adobe Shockwave Player, allowing attackers to execute arbitrary code. Various chunk parsing...

9.3CVSS0.07476EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2011/06/14 12:00 a.m.•3 views

PT-2011-3608

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.6.0.626 Description The issue is related to an input validation vulnerability in the FLV ASSET Xtra component, allowing attackers to execute arbitrary code via unspecified vectors. Recommendations Fo...

9.3CVSS0.04551EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2011/06/14 12:00 a.m.•37 views

Adobe Shockwave CASt Chunk Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS5.4AI score0.07476EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2011/06/14 12:00 a.m.•43 views

Adobe Shockwave rcsL Chunk 16-bit Field Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS5.1AI score0.03575EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2011/06/14 12:00 a.m.•41 views

Adobe Shockwave xtcL Chunk Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS6.1AI score0.07476EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2011/06/14 12:00 a.m.•30 views

Adobe Shockwave tSAC Chunk String Termination Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS2.7AI score0.04551EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2011/06/14 12:00 a.m.•28 views

Adobe Shockwave rcsL Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS5.1AI score0.08464EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2011/06/14 12:00 a.m.•35 views

Adobe Shockwave Missing Lctx Chunk Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of t...

9.3CVSS3.2AI score0.03575EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2011/06/14 12:00 a.m.•43 views

Adobe Shockwave TextXtra Text Element Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS4.6AI score0.07476EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2011/06/14 12:00 a.m.•35 views

Adobe Shockwave GIF Decompression Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS3.1AI score0.04296EPSS
SaveExploits0References1
Rows per page
Query Builder