CVE-2010-2587: Improper Restriction of Operations within the Bounds of a Memory Buffer

The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2588 and CVE-2010-4188...

CVE-2010-4188: Improper Restriction of Operations within the Bounds of a Memory Buffer

The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a Director movie with an IFWV chunk with a size field of 0, which is used in the calculation of a file offset and causes invalid data to ...

CVE-2010-4093: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, CVE-2010-4192, and CVE-2010-4306...

CVE-2010-4307: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspecified vectors...

CVE-2010-4306: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, and CVE-2010-4192...

PT-2011-1475

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.5.9.620 Description The issue arises from improper validation of unspecified input data, allowing attackers to execute arbitrary code via unknown vectors. Recommendations For Adobe Shockwave Player...

CVE-2010-4192: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a Director movie with a crafted 3D Assets 0xFFFFFF88 type record that triggers an incorrect memory allocation, a different vulnerability than CVE-2011-0555,...

PT-2011-2444

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.5.9.620 Description The issue allows attackers to execute arbitrary code or cause a denial of service due to memory corruption. This is achieved via a crafted PFR1 chunk, leading to an unexpected sig...

CVE-2010-4194: Improper Input Validation

The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors...

Adobe Releases Huge Batch of Patches for Flash, Reader and Shockwave

Adobe has released a massive set of patches that fix vulnerabilities in most of its more popular applications, including a number of critical bugs in Flash, Reader and Shockwave. The company on Tuesday pushed patches for dozens of vulnerabilities in its most widely deployed products, including 13...

PT-2011-2445

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.5.9.620 Description The issue is related to an integer overflow in Adobe Shockwave Player, which can be triggered by a Director movie containing a large count value in 3D assets type 0xFFFFFF45 recor...

PT-2011-1472

Name of the Vulnerable Software and Affected Versions Adobe Shockwave affected versions not specified Description The issue is related to a remote code execution vulnerability in Adobe Shockwave. No specific details about affected devices or real-world incidents are provided. Recommendations At t...

PT-2011-1474

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player affected versions not specified Description The issue concerns a remote code execution vulnerability related to the FFFFFF88 Record Count Element in Adobe Shockwave Player. Recommendations At the moment, there is no...

Adobe Shockwave Player FFFFFF88 Record Count Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Shockwave CSWV Chunk Substructure Offset Value Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Shockwave Player 0xFFFFFF45 Record Count Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Flash Player DefineFunction2 Memory Corruption (APSB10-26; CVE-2010-3646)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. The vulnerability is due to insufficient sanitization of the DefineFunction2 value by the Adobe Flash Player. A remote attacker might exploit this issue by convincing a victim to open a specially...

Metasploit Framework v3.5.1 Updated Version Download !

Our favourite exploitation framework – The Metasploit Framework has been updated! We now have Metasploit version 3.5.1! "The Metasploit Framework is a penetration testing toolkit, exploit development platform, and research tool. The framework includes hundreds of working remote exploits for a...

Adobe Shockwave Player Multiple Vulnerabilities (Nov 2010)

Adobe Shockwave Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross site scripting

Cross-site scripting XSS vulnerability in an unspecified Shockwave Flash file in RSA Adaptive Authentication 2.x and 5.7.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors...