1551 matches found
Adobe Shockwave Player Director文件分析ATOM size无限循环漏洞
CVE ID: CVE-2010-1282 Code Audit Labs http://www.vulnhunt.com 在Adobe’s Shockwave Player软件中 发现一个漏洞，触发该漏洞需要用户访问一个畸形的web页面。 该漏洞存在于当shockwave player分析atom size时，不当处理导致代码无限循环。 成功利用能导致cpu 100%,造成拒绝服务攻击。 11.5.2.602 ,11.5.6.606 and prior 厂商补丁： adobe --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版...
Adobe Shockwave Player 11.5.6.606 (DIR) Multiple Memory Vulnerabilities
No description provided by source. / Title: Adobe Shockwave Player 11.5.6.606 DIR Multiple Memory Vulnerabilities Vendor: Adobe Systems Incorporated Product web page: http://www.adobe.com Summary: Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now...
ZDI-10-088: Adobe Shockwave Player 3D Parsing Memory Corruption Vulnerability
ZDI-10-088: Adobe Shockwave Player 3D Parsing Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-088 May 11, 2010 -- CVE ID: CVE-2010-1283 -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave Player -- TippingPointTM IPS Customer Protection: TippingPoin...
Adobe Patches 'Critical' Shockwave, ColdFusion holes
Adobe joined the Patch Tuesday train today with the release of patches for at least 21 documented security vulnerabilities in the Shockwave and ColdFusion product lines. According to the APSB10-12 security bulletin, 18 of the 21 flaws affected the Shockwave Player, a free software product that le...
Adobe Shockwave Player 11.5.6.606 (DIR) Multiple Memory Vulnerabilities
Summary Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to some of the best the Web has to offer - including dazzling 3D games and entertainment, interactive product demonstrations, and online learning applications. Shockwave Player...
Adobe Shockwave Player 0xFFFFFF49 Record Parsing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the code responsible for parsing 3D objec...
Adobe Shockwave Invalid Offset Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave. User interaction is required in that a target visit a malicious website. The specific flaw exists within the code responsible for parsing Director files. The vulnerable function is...
PT-2010-2986 · Adobe · Shockwave Player
Name of the Vulnerable Software and Affected Versions: Adobe Shockwave Player versions prior to 11.5.7.609 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption. This is achieved through a crafted .dir file that exploits the...
Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the code...
Adobe Shockwave Player 3D Model Buffer Overflow Vulnerabilities
This host has Adobe Shockwave Player installed and is prone to Buffer Overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeshockwaveplayerbofvulnjan10.nasl 5263 2017-02-10 13:45:51Z teissa $ Adobe Shockwave Player 3D Model Buffer Overflow Vulnerabilities Authors: Antu Sanadi Copyright...
Adobe Shockwave Player 3D Model Buffer Overflow Vulnerabilities
Adobe Shockwave Player is prone to buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Integer overflow
Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via 1 an unspecified block type in a Shockwave file, leading to a heap-based buffer overflow; and might allow remote attackers to execute arbitrary code via 2 an unspecified 3D...
CVE-2009-4003
Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via 1 an unspecified block type in a Shockwave file, leading to a heap-based buffer overflow; and might allow remote attackers to execute arbitrary code via 2 an unspecified 3D...
CVE-2009-4002
Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file...
Heap overflow
Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file...
CVE-2009-4003
Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via 1 an unspecified block type in a Shockwave file, leading to a heap-based buffer overflow; and might allow remote attackers to execute arbitrary code via 2 an unspecified 3D...
CVE-2009-4002
Adobe Shockwave Player is affected by CVE-2009-4002 (buffer overflow in 3D model processing) in versions prior to 11.5.6.606. The vulnerability allows remote code execution and is discussed alongside CVE-2009-4003 (integer overflows) in multiple advisories. Affected software: Shockwave Player on ...
CVE-2009-4003
CVE-2009-4003 concerns multiple integer overflow vulnerabilities in Adobe Shockwave Player prior to 11.5.6.606, reported across several sources. The flaws occur during Shockwave processing (notably in 3D blocks) and can lead to heap memory corruption and potential remote code execution. Affected ...