CVE-2010-4084: Improper Restriction of Operations within the Bounds of a Memory Buffer

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2581, CVE-2010-4085, CVE-2010-4086, and CVE-2010-4088...

Adobe Releases Security Update for Shockwave Player

Adobe has released a security update for Shockwave Player to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review Adobe security bulletin APSB10-25 and apply any necessary updates to help...

PT-2010-5284

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a .dir file with "duplicated references to the same KEY chunk," a different vulnerability than CVE-2010-2581, CVE-2010-4084, CVE-2010-4085, and...

PT-2010-5283

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.5.9.615 Description The issue allows attackers to execute arbitrary code or cause a denial of service due to memory corruption. This can be achieved via a .dir file with a crafted mmap record...

PT-2010-4126

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a Director file containing a crafted pamm chunk with an invalid 1 size and 2 number of sub-chunks, a different vulnerability than...

CVE-2010-4085: Improper Restriction of Operations within the Bounds of a Memory Buffer

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2581, CVE-2010-4084, CVE-2010-4086, and CVE-2010-4088...

CVE-2010-4088: Improper Restriction of Operations within the Bounds of a Memory Buffer

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a .dir file with "duplicated references to the same KEY chunk," a different vulnerability than CVE-2010-2581, CVE-2010-4084, CVE-2010-4085, and...

CVE-2010-2582: Improper Restriction of Operations within the Bounds of a Memory Buffer

An unspecified function in TextXtra.x32 in Adobe Shockwave Player before 11.5.9.615 does not properly reallocate a buffer when processing a DEMX chunk in a Director file, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code...

CVE-2010-3655: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code via unspecified vectors...

PT-2010-4127

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.5.9.615 Description The issue arises from an unspecified function in TextXtra.x32 that fails to properly reallocate a buffer when processing a DEMX chunk in a Director file. This failure can lead to ...

Adobe Shockwave Player Director File SetVertexArray Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within code...

Adobe Shockwave Player Lnam Chunk String Processing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2010-5281

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2581, CVE-2010-4084, CVE-2010-4086, and CVE-2010-4088...

CVE-2010-2581: Improper Restriction of Operations within the Bounds of a Memory Buffer

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a Director file containing a crafted pamm chunk with an invalid 1 size and 2 number of sub-chunks, a different vulnerability than...

New Adobe Flash Bug Being Exploited

On the same day that it plans to release a patch for a critical flaw in Shockwave, Adobe confirmed on Thursday morning that there is a newly discovered bug in Flash that is being actively exploited already in attacks against Reader. The vulnerability affects Flash on all of the relevant platforms...

Adobe Shockwave Player Duplicate LSCM Records Memory Corruption (APSB10-25; CVE-2010-4089)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

Adobe Shockwave Player Duplicate Keys Memory Corruption (APSB10-25; CVE-2010-4088)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

Adobe Shockwave Player CSWV Record Length Memory Corruption (APSB10-25; CVE-2010-4087)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

Adobe Shockwave Player MMAP Entry Size Memory Corruption (APSB10-25; CVE-2010-4084; CVE-2010-4086)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

Shockwave Player < 11.5.9.615

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.9.615. Such versions are potentially affected by the following issues : - A memory corruption issue exists that could lead to code execution. Note that there are reports this issue is being exploited ...