CVE-2010-1281

CVE-2010-1281 affects Adobe Shockwave Player (pre-11.5.7.609). The vulnerability is in iml32.dll where a value read from a file used in Director file-pointer calculations is not validated, enabling remote code execution or memory corruption via a crafted .dir file. Exploitation requires user inte...

CVE-2010-1282

Adobe Shockwave Player (Windows/macOS; prior to 11.5.7.609) is vulnerable due to parsing a specially crafted Director (.dir) file; a crafted ATOM size can trigger an infinite loop and high CPU usage, causing remote denial of service. Multiple connected sources corroborate CVE-2010-1282 and relate...

CVE-2010-1283

Adobe Shockwave Player before 11.5.7.609 is affected by CVE-2010-1283 due to a memory corruption flaw while parsing 3D blocks in Director (.dir) files (0xFFFFFF49). Exploitation could allow remote code execution or cause a denial of service. Affected product: Adobe Shockwave Player. Remediation: ...

CVE-2010-1292

CVE-2010-1292 affects Adobe Shockwave Player prior to 11.5.7.609. The vulnerability arises in the pami RIFF chunk parsing, where a value from a file is not validated before being used in file-pointer calculations, enabling a remote attacker to execute arbitrary code or cause memory corruption via...

CVE-2010-0129

Adobe Shockwave Player is affected by CVE-2010-0129 due to multiple integer overflows leading to memory corruption via specially crafted Director (.dir) files. The vulnerability affects Shockwave Player prior to 11.5.7.609 and can enable remote memory corruption or potential arbitrary code execut...

PT-2010-1943 · Adobe · Shockwave Player

Name of the Vulnerable Software and Affected Versions: Adobe Shockwave Player versions prior to 11.5.7.609 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption. This can be achieved via crafted FFFFFF45h Shockwave 3D blocks...

PT-2010-2985 · Adobe · Shockwave Player

Name of the Vulnerable Software and Affected Versions: Adobe Shockwave Player versions prior to 11.5.7.609 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted .dir file. This is related to an erroneous...

PT-2010-1946 · Adobe · Shockwave Player

Name of the Vulnerable Software and Affected Versions: Adobe Shockwave Player versions prior to 11.5.7.609 Description: The issue is related to an integer overflow that might allow remote attackers to execute arbitrary code via a crafted .dir aka Director file. Recommendations: For versions prior...

VUPEN Security Research - Adobe Shockwave 3D Blocks Field Code Execution Vulnerability (CVE-2010-1283)

VUPEN Security Research - Adobe Shockwave 0xFFFFFF49 3D Block Code Execution Vulnerability CVE-2010-1283 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to...

Secunia Research: Adobe Shockwave Player Font Processing Buffer Overflow

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player Font Processing Buffer Overflow - ====================================================================== Table of Contents Affected...

VUPEN Security Research - Adobe Shockwave 3D Two Remote Code Execution Vulnerabilities (CVE-2010-1284)

VUPEN Security Research - Adobe Shockwave 3D Two Code Execution Vulnerabilities CVE-2010-1284 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to some of th...

Secunia Research: Adobe Shockwave Player Array Indexing Vulnerability

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player Array Indexing Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Adobe Shockwave Player Integer Overflow Vulnerability

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Adobe Shockwave Player Asset Entry Parsing Vulnerability

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player Asset Entry Parsing Vulnerability - ====================================================================== Table of Contents Affected...

VUPEN Security Research - Adobe Shockwave DIRAPI Multiple Code Execution Vulnerabilities (CVE-2010-1280)

VUPEN Security Research - Adobe Shockwave DIRAPI Multiple Code Execution Vulnerabilities CVE-2010-1280 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to...

VUPEN Security Research - Adobe Shockwave IML32 Multiple Code Execution Vulnerabilities (CVE-2010-0129)

VUPEN Security Research - Adobe Shockwave IML32 Multiple Code Execution Vulnerabilities CVE-2010-0129 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to so...

CVE-2010-1284: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291...

CVE-2010-1290: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, and CVE-2010-1291...

CVE-2010-1286: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1287, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291...

CVE-2010-1289: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1290, and CVE-2010-1291...