CVE-2009-3464

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3465. NOTE: some of these details are obtained from third party information...

CVE-2009-3466

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an "invalid string length vulnerability." NOTE: some of these details are obtained from third party information...

CVE-2009-3463

CVE-2009-3463 affects Adobe Shockwave Player prior to 11.5.2.602, with an array index error that could allow remote code execution via crafted Shockwave content on a web site. The issue is part of APSB09-16 and is accompanied by related CVEs (3464–3466). The documented impact is arbitrary code ex...

CVE-2009-3464

CVE-2009-3464 affects Adobe Shockwave Player prior to 11.5.2.602. The vulnerability is described as an invalid pointer vulnerability in the processing of crafted Shockwave content, which could allow remote code execution. Some sources group this with multiple related issues under APSB09-16. The d...

CVE-2009-3465

CVE-2009-3465 affects Adobe Shockwave Player prior to 11.5.2.602. An invalid pointer vulnerability in processing crafted Shockwave content can allow remote code execution via a web page. Impact is arbitrary code execution with network access and no user interaction required per the referenced adv...

CVE-2009-3465

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3464. NOTE: some of these details are obtained from third party information...

Adobe Shockwave 11.5.1.601 Player Multiple Code Execution Vulnerability

Exploit for unknown platform in category remote exploits ======================================================================= Adobe Shockwave 11.5.1.601 Player Multiple Code Execution Vulnerability ======================================================================= Title: Adobe Shockwave...

Adobe Shockwave 11.5.1.601 Player Multiple Code Execution Vulnerability

No description provided by source. html object classid='clsid:233C1507-6A77-46A4-9443-F871F945D258' id='ShockW'/object script language='vbscript' argCount = 1 arg1=String2097152, "A" ShockW.PlayerVersion = arg1 /script...

Adobe Shockwave Player 11.5.1.601 - Multiple Code Executions

Adobe Shockwave Player 11.5.1.601 - Multiple Code Executions argCount = 1 arg1=String2097152, "A" ShockW.PlayerVersion = arg1...

CVE-2009-3463: Improper Restriction of Operations within the Bounds of a Memory Buffer

Array index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site. NOTE: some of these details are obtained from third party information...

CVE-2009-3465: Improper Control of Generation of Code

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3464. NOTE: some of these details are obtained from third party information...

Shockwave Player <= 11.5.1.601 Multiple Vulnerabilities (APSB09-16)

The remote Windows host contains a version of Adobe's Shockwave Player that is 11.5.1.601 or earlier. As such, it is affected by multiple issues : - An invalid index vulnerability could lead to code execution. CVE-2009-3463 - Invalid pointer vulnerabilities could lead to code execution...

CVE-2009-3464: Improper Control of Generation of Code

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3465. NOTE: some of these details are obtained from third party information...

Adobe Shockwave Player 11.5.1.601 - Multiple Code Executions

argCount = 1 arg1=String2097152, "A" ShockW.PlayerVersion = arg1...

CVE-2009-3466: Undefined Security Weakness

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an "invalid string length vulnerability." NOTE: some of these details are obtained from third party information...

Adobe Patches Critical Shockwave Player Flaws

Adobe today released a patch to fix several serious security flaws in its Shockwave Player software. The update, which is rated “critical,” addresses a total of five documented vulnerabilities. The most serious flaw could allow remote code execution attacks against Windows and Mac users. From...

Adobe ShockWave Player 11.5.1.601 Stack Overflow

Application: Adobe ShockWave Player 11.5.1.601 Platforms: Windows XP Professional French SP2 and SP3 crash: IE 6.0.2900.2180 Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details and bug 3 The Code =============== 1...

Adobe Shockwave Player ActiveX Control BOF Vulnerability

This host has Adobe Shockwave Player ActiveX Control installed and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodadobeshockwaveplayerbofvuln.nasl 6530 2017-07-05 06:23:50Z cfischer $ Adobe Shockwave Player ActiveX Control BOF Vulnerability Authors: Nikita MR...

Adobe Shockwave Player ActiveX Control BOF Vulnerability

Adobe Shockwave Player ActiveX Control is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Adobe ShockWave Player SwDir.dll控件堆溢出漏洞

CVE ID: CVE-2009-3244 Adobe Shockwave Player是专门播放使用Director Shockwave Studio制作的网页的外挂软件。 Shockwave Player所提供的SwDir.dll ActiveX控件在播放恶意网页文件时存在堆溢出漏洞，用户受骗打开了包含有超长PlayerVersion属性值的HTML文件时就可能触发这个溢出，导致拒绝服务或执行任意代码。 Adobe Shockwave Player 11.5.1.601 临时解决方法： 为CLSID...