CVE-2010-2587

Adobe Shockwave Player (dirapi.dll) is affected by CVE-2010-2587 and related CVEs due to a parsing flaw in the IFWV chunk size handling that can lead to memory corruption and potentially arbitrary code execution or a denial of service. Affected product/version: Shockwave Player prior to 11.5.9.62...

CVE-2010-2589

Integer overflow in the dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspecified vectors...

CVE-2010-4191

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4192, and CVE-2010-4306...

CVE-2010-4194

Adobe Shockwave Player contains a vulnerability CVE-2010-4194 in the dirapi.dll module where input data is not properly validated. This can enable remote code execution via unspecified vectors on versions before 11.5.9.620. Mitigation: update to Shockwave Player 11.5.9.620 as described in APSB11-...

CVE-2010-4195

The TextXtra module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors...

CVE-2010-4196

The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors...

CVE-2010-4189

Adobe Shockwave Player contains a vulnerability in the IML32 module used when parsing GIFs within Director movies. A crafted GIF image with a manipulated global color table size triggers an out-of-range pointer offset, enabling memory corruption and potentially arbitrary code execution or a denia...

CVE-2010-4188

The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a Director movie with an IFWV chunk with a size field of 0, which is used in the calculation of a file offset and causes invalid data to ...

CVE-2011-0557

Integer overflow in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code via a Director movie with a large count value in 3D assets type 0xFFFFFF45 record, which triggers a "faulty allocation" and memory corruption...

CVE-2010-4307

Buffer overflow in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspecified vectors...

CVE-2011-0555

The TextXtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a Director file with a crafted DEMX RIFF chunk that triggers incorrect buffer allocation, a different vulnerability than...

PT-2011-1478

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.5.9.620 Description The issue is related to the Shockwave 3d Asset module in Adobe Shockwave Player, which does not properly validate input data. This allows attackers to execute arbitrary code via...

PT-2011-1477

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.5.9.620 Description The issue arises from improper validation of unspecified input data in the TextXtra module, allowing attackers to execute arbitrary code via unknown vectors. Recommendations For...

CVE-2011-0557: Undefined Security Weakness

Integer overflow in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code via a Director movie with a large count value in 3D assets type 0xFFFFFF45 record, which triggers a "faulty allocation" and memory corruption...

PT-2011-1476

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.5.9.620 Description The issue is related to the dirapi.dll module, which does not properly validate input data. This allows attackers to execute arbitrary code via unknown vectors. Recommendations Fo...

PT-2011-1464

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, CVE-2010-4192, and CVE-2010-4306...

PT-2011-1492

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, and CVE-2010-4192...

PT-2011-1371

The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2588 and CVE-2010-4188...

PT-2011-1372

The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2587 and CVE-2010-4188...

PT-2011-1373

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.5.9.620 Description The issue is related to an integer overflow in the dirapi.dll module, which allows attackers to execute arbitrary code. Recommendations For versions prior to 11.5.9.620, update to...