CVE-2010-2879

Adobe Shockwave Player contains a CVE-2010-2879 vulnerability: an integer overflow in the TextXtra.x32 allocator can cause heap memory corruption, enabling remote code execution or a denial of service. Affected product/version: Shockwave Player before 11.5.8.612. Root cause: faulty heap allocatio...

CVE-2010-2871

CVE-2010-2871 : Adobe Shockwave Player before 11.5.8.612 contains an integer overflow in the 3D object handling that, during parsing of a 0xFFFFFF45 RIFF record in a Director movie, can lead to heap memory corruption and remote code execution or denial of service. The issue is documented across m...

CVE-2010-2877

Adobe Shockwave Player is affected by CVE-2010-2877 (and related CVEs) where a Director movie count value is not properly validated, enabling heap memory corruption and potential code execution. Affected component paths include IML32X.dll and DIRAPIX.dll, with the vulnerability enabling remote co...

CVE-2010-2863

Adobe Shockwave Player before 11.5.8.612 allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors...

CVE-2010-2863

Adobe Shockwave Player before 11.5.8.612 is affected by memory corruption vulnerabilities (e.g., CVE-2010-2863) that could allow denial of service or arbitrary code execution via unspecified vectors. Affected versions include 11.5.7.609 and earlier on Windows/Mac, with multiple related CVEs (e.g....

CVE-2010-2881

Adobe Shockwave Player contains a memory-corruption vulnerability (CVE-2010-2881) in IML32.dll caused by improper parsing of .dir media files, enabling remote code execution or memory corruption. Impact states denial of service or arbitrary code execution via a malformed file (PoC at offset 0x24C...

ZDI-10-161: Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability

ZDI-10-161: Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-161 August 24, 2010 -- CVE ID: CVE-2010-2872 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave Player --...

CVE-2010-2867: Improper Restriction of Operations within the Bounds of a Memory Buffer

DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly handle a certain return value associated with the rcsL chunk in a Director movie, which allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted movie, related to a...

CVE-2010-2869: Improper Restriction of Operations within the Bounds of a Memory Buffer

IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x3712 of a...

CVE-2010-2865: Undefined Security Weakness

Unspecified vulnerability in Adobe Shockwave Player before 11.5.8.612 allows attackers to cause a denial of service via unknown vectors...

CVE-2010-2872: Improper Input Validation

Adobe Shockwave Player before 11.5.8.612 does not properly validate an offset value in the pami RIFF chunk in a Director movie, which allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted movie...

CVE-2010-2871: Undefined Security Weakness

Integer overflow in the 3D object functionality in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted size value in a 0xFFFFFF45 RIFF record in a Director movie...

CVE-2010-2877: Improper Input Validation

Adobe Shockwave Player before 11.5.8.612 does not properly validate a count value in a Director movie, which allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted movie, related to IML32X.dll and DIRAPIX.dll...

CVE-2010-2876: Improper Input Validation

Adobe Shockwave Player before 11.5.8.612 does not properly validate values associated with buffer-size calculation for a 0xFFFFFFF8 record in a 1 .dir or 2 .dcr Director movie, which allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafte...

CVE-2010-2881: Improper Restriction of Operations within the Bounds of a Memory Buffer

IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x24C0 of a...

CVE-2010-2875: Undefined Security Weakness

Integer signedness error in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a length value associated with the tSAC chunk in a Director movie...

CVE-2010-2873: Improper Input Validation

Adobe Shockwave Player before 11.5.8.612 does not properly validate offset values in the rcsL RIFF chunks of 1 .DIR and 2 .DCR Director movies, which allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted movie...

CVE-2010-2870: Improper Restriction of Operations within the Bounds of a Memory Buffer

DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly validate a certain chunk size in the mmap chunk in a Director movie, which allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted movie...

CVE-2010-2878: Improper Input Validation

DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly validate a value associated with a buffer seek for a Director movie, which allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted movie...

ZDI-10-163: Adobe Shockwave Director tSAC Chunk Parsing Remote Code Execution Vulnerability

ZDI-10-163: Adobe Shockwave Director tSAC Chunk Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-163 August 24, 2010 -- CVE ID: CVE-2010-2874 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave Play...