CVE-2010-2879

Multiple integer overflows in the allocator in the TextXtra.x32 module in Adobe Shockwave Player before 11.5.8.612 allow remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted 1 element count or 2 element size value in a file...

CVE-2010-2875

Integer signedness error in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a length value associated with the tSAC chunk in a Director movie...

CVE-2010-2868

Adobe Shockwave Player contains a memory corruption/remote code execution risk due to IML32.dll failing to parse .dir files. A malformed .dir file (e.g., offset 0x320D) can cause memory corruption or code execution. Affected: Shockwave Player

CVE-2010-2876

CVE-2010-2876 concerns Adobe Shockwave Player. The vulnerability lies in parsing a FFFFFF88 record in Director (.dir/.dcr) files, where values used to compute a heap buffer size are overflowed, leading to heap memory corruption and potential remote code execution. Affected product: Shockwave Play...

CVE-2010-2878

Adobe Shockwave Player contains a DIRAPIX.dll flaw (CVE-2010-2878) where improper handling of a Director movie buffer seek leads to heap memory corruption, enabling remote code execution or crash. Affected product: Shockwave Player before 11.5.8.612. Attack requires a crafted movie; vendor adviso...

CVE-2010-2871

CVE-2010-2871 : Adobe Shockwave Player before 11.5.8.612 contains an integer overflow in the 3D object handling that, during parsing of a 0xFFFFFF45 RIFF record in a Director movie, can lead to heap memory corruption and remote code execution or denial of service. The issue is documented across m...

CVE-2010-2879

Adobe Shockwave Player contains a CVE-2010-2879 vulnerability: an integer overflow in the TextXtra.x32 allocator can cause heap memory corruption, enabling remote code execution or a denial of service. Affected product/version: Shockwave Player before 11.5.8.612. Root cause: faulty heap allocatio...

CVE-2010-2877

Adobe Shockwave Player is affected by CVE-2010-2877 (and related CVEs) where a Director movie count value is not properly validated, enabling heap memory corruption and potential code execution. Affected component paths include IML32X.dll and DIRAPIX.dll, with the vulnerability enabling remote co...

CVE-2010-2880

DIRAPI.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x47 of a...

CVE-2010-2863

Adobe Shockwave Player before 11.5.8.612 allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors...

CVE-2010-2868

IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x320D...

CVE-2010-2867

DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly handle a certain return value associated with the rcsL chunk in a Director movie, which allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted movie, related to a...

CVE-2010-2871

Integer overflow in the 3D object functionality in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted size value in a 0xFFFFFF45 RIFF record in a Director movie...

CVE-2010-2873

Adobe Shockwave Player is affected by CVE-2010-2873 and related CVEs due to improper validation of offset values in rcsL RIFF chunks within Director files (.DIR/.DCR). This leads to heap memory corruption and can allow remote code execution or a denial of service when a crafted movie is processed...

CVE-2010-2866

CVE-2010-2866 is an Adobe Shockwave Player vulnerability caused by an integer signedness error in the DIRAPI module during parsing of tSAC chunks in Director movies. The flaw can allow remote code execution or memory corruption leading to a denial of service, if a negative/large count value is pr...

CVE-2010-2882

Summary of CVE-2010-2882 (Adobe Shockwave Player) : Affected software is Shockwave Player for Windows and macOS (versions 11.5.7.609 and older). The vulnerability stems from how DIRAPI.dll parses .dir media files, leading to a memory corruption condition that can cause remote denial of service or...

CVE-2010-2870

DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly validate a certain chunk size in the mmap chunk in a Director movie, which allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted movie...

CVE-2010-2864

IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x24C6 of a...

CVE-2010-2880

Adobe Shockwave Player is affected by CVE-2010-2880 where DIRAPI.dll fails to parse .dir files, enabling memory corruption that can cause a denial of service or allow arbitrary code execution via a malformed file with an invalid value. Affected version: Shockwave Player before 11.5.8.612. The ava...

CVE-2010-2865

Adobe Shockwave Player prior to 11.5.8.612 is affected by CVE-2010-2865, a denial-of-service vulnerability reported in APSB10-20. The issue is described as an unspecified DoS via unknown vectors, with the macro summary indicating memory-related issues across Shockwave components. The advisory not...