APSB15-22 Security update available for Adobe Shockwave Player

Adobe has released a security update for Adobe Shockwave Player. This update addresses critical vulnerabilities that could potentially allow an attacker to take control of the affected system...

Internet Bug Bounty: Wrong Handling of Content-Type allows Flash injection and Rosseta flash patch bypass

Hey, I spent some time reversing the mitigation of Rosetta Flash. This research helped me to discover a very interesting bug: Adobe Flash player uses "string searching" similar to indexOf over the entire response's "Content-Type" header value to match the "application/x-shockwave-flash" string...

Shockwave Player Code Execution

The vulnerability of the Shockwave Player software is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

Shockwave Player Code Execution

The vulnerability of the Shockwave Player software is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

Adobe Shockwave Player security vulnerabilities

Memory corruptions...

Adobe Shockwave Player Multiple Vulnerabilities -01 (Jul 2015) - Windows

Adobe Shockwave Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Shockwave Player Memory Corruption Vulnerability (CNVD-2015-04612)

Adobe Shockwave Player is the United States of America Ordoby Adobe company a multimedia player products, it can be Adobe Director a multimedia production software produced by the application released to the Internet, the installation of the Shockwave plug-in browser can be viewed. A security...

Adobe Shockwave Player Multiple Vulnerabilities -01 (Jul 2015) - Mac OS X

Adobe Shockwave Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Shockwave Player Memory Corruption Vulnerability (CNVD-2015-04611)

Adobe Shockwave Player is the United States of America Ordoby Adobe company a multimedia player products, it can be Adobe Director a multimedia production software produced by the application released to the Internet, the installation of the Shockwave plug-in browser can be viewed. A security...

Adobe Shockwave Player <= 12.1.8.158 Multiple RCE Vulnerabilities (APSB15-17) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is prior to or equal to 12.1.8.158. It is, therefore, affected by multiple remote code execution vulnerabilities : - An unspecified memory corruption issue exists due to improper validation of user-supplied input. An...

Adobe Shockwave Player <= 12.1.8.158 Multiple RCE Vulnerabilities (APSB15-17)

The remote Windows host contains a version of Adobe Shockwave Player that is prior to or equal to 12.1.8.158. It is, therefore, affected by multiple remote code execution vulnerabilities : - An unspecified memory corruption issue exists due to improper validation of user-supplied input. An attack...

CVE-2015-5121

Adobe Shockwave Player before 12.1.9.159 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5120...

CVE-2015-5120

Adobe Shockwave Player before 12.1.9.159 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5121...

Memory corruption

Adobe Shockwave Player before 12.1.9.159 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5121...

CVE-2015-5121

Adobe Shockwave Player before 12.1.9.159 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5120...

CVE-2015-5120

Adobe Shockwave Player is affected by CVE-2015-5120: memory corruption allowing arbitrary code execution or denial of service via unspecified vectors. Affected versions include prior to 12.1.9.159 (per descriptions), with related entries noting vulnerabilities up to 12.1.8.x. The vulnerability is...

CVE-2015-5120

Adobe Shockwave Player before 12.1.9.159 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5121...

CVE-2015-5121

CVE-2015-5121 affects Adobe Shockwave Player: memory corruption vulnerability that can lead to arbitrary code execution or denial of service via unspecified vectors. Affected versions are before 12.1.9.159 (per NVD); remediation is to update to 12.1.9.159 or later. Connected documents corroborate...

PT-2015-1509

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 12.1.9.159 Description The issue is caused by a buffer overflow in dynamic memory, allowing remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified...

PT-2015-1510

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 12.1.9.159 Description The issue is caused by a buffer overflow in dynamic memory, allowing remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors. Recommendatio...