PT-2011-1373

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.5.9.620 Description The issue is related to an integer overflow in the dirapi.dll module, which allows attackers to execute arbitrary code. Recommendations For versions prior to 11.5.9.620, update to...

PT-2011-1469

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a malformed chunk in a Director file, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4190, CVE-2010-4191, CVE-2010-4192, and CVE-2010-4306...

PT-2011-1473

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4192, and CVE-2010-4306...

PT-2011-1470

The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a Director movie with an IFWV chunk with a size field of 0, which is used in the calculation of a file offset and causes invalid data to ...

PT-2011-2443

The TextXtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a Director file with a crafted DEMX RIFF chunk that triggers incorrect buffer allocation, a different vulnerability than...

CVE-2010-4187: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a malformed chunk in a Director file, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4190, CVE-2010-4191, CVE-2010-4192, and CVE-2010-4306...

CVE-2010-4195: Improper Input Validation

The TextXtra module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors...

CVE-2011-0569: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a PFR1 chunk containing an invalid size value that leads to an unexpected sign extension and a buffer overflow, a different...

CVE-2011-0555: Improper Restriction of Operations within the Bounds of a Memory Buffer

The TextXtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a Director file with a crafted DEMX RIFF chunk that triggers incorrect buffer allocation, a different vulnerability than...

PT-2011-2457

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.5.9.620 Description The issue allows attackers to execute arbitrary code or cause a denial of service due to memory corruption. This is achieved via a PFR1 chunk containing an invalid size value,...

PT-2011-1493

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.5.9.620 Description A buffer overflow issue allows attackers to execute arbitrary code via unspecified vectors. Recommendations For versions prior to 11.5.9.620, update to version 11.5.9.620 or later...

PT-2011-1471

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.5.9.620 Description The issue allows attackers to execute arbitrary code or cause a denial of service due to memory corruption. This can be achieved via a Director movie containing a GIF image with a...

CVE-2010-4193: Improper Input Validation

Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors...

CVE-2010-4191: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4192, and CVE-2010-4306...

CVE-2010-4196: Improper Input Validation

The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors...

CVE-2010-2588: Improper Restriction of Operations within the Bounds of a Memory Buffer

The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2587 and CVE-2010-4188...

CVE-2011-0556: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted PFR1 chunk that leads to an unexpected sign extension and an invalid pointer dereference, a different vulnerability than...

CVE-2010-2589: Undefined Security Weakness

Integer overflow in the dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspecified vectors...

CVE-2010-4189: Improper Restriction of Operations within the Bounds of a Memory Buffer

The IML32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a Director movie containing a GIF image with a crafted global color table size value, which causes an out-of-range pointer offset...

CVE-2010-2587: Improper Restriction of Operations within the Bounds of a Memory Buffer

The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2588 and CVE-2010-4188...