Microsoft Office 2003 Embedded Shockwave Flash Object Security Bypass Weakness

No description provided by source. source: http://www.securityfocus.com/bid/18583/info Microsoft Office is prone to a weakness that may allow remote attackers to execute arbitrary script code contained in Shockwave Flash Objects without first requiring confirmation from users. A successful attack...

Adobe to Patch Vulnerable Flash Player in Shockwave

It’s bad enough that the Flash runtime bundled with Adobe’s Shockwave player is deficient in security patches going back to January 2013, but what’s worse is that the increased attack surface provided by Shockwave might make it easier to exploit. And, in the bargain, Adobe has known about the iss...

Macromedia Shockwave SWDIR.SLL ActiveX Denial of Service - Ver2 (CVE-2006-6885)

A denial-of-service vulnerability has been reported in Macromedia Shockwave. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Macromedia Shockwave swdir.dll ActiveX Control Remote Stack Buffer Overflow - Ver2 (CVE-2007-1403)

A buffer overflow vulnerability has been reported in Macromedia Shockwave. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

RealNetworks RealPlayer SWF Frame Handling Buffer Overflow - ver 2 (CVE-2007-5400)

There exists a heap buffer overflow vulnerability in the RealNetworks RealPlayer product. The vulnerability is due to a design error within the handling of frames in Shockwave Flash SWF files. A remote attacker can exploit this vulnerability to create a heap overflow condition in the target...

Adobe Shockwave Player Memory Corruption Vulnerability (Mar 2014) - Mac OS X

Adobe Shockwave Player is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Shockwave Player Memory Corruption Vulnerability (Mar 2014) - Windows

Adobe Shockwave Player is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Shockwave Player内存破坏漏洞(CVE-2014-0505)

Bugtraq ID:66182 CVE ID:CVE-2014-0505 Adobe Shockwave Player是一款用于播放使用Director Shockwave Studio制作的网页的外挂软件。 Adobe Shockwave Player存在一个未明内存破坏漏洞，允许远程攻击者构建恶意文件，诱使用户解析，可以应用程序上下文执行任意代码。 0 Adobe Shockwave Player 12.0.9.149 Adobe Shockwave Player 12.0.9.149已经修复该漏洞，建议用户下载更新： http://www.adobe.com...

CVE-2014-0505

Adobe Shockwave Player before 12.1.0.150 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

Memory corruption

Adobe Shockwave Player before 12.1.0.150 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2014-0505

Adobe Shockwave Player is vulnerable to a memory corruption issue leading to arbitrary code execution or DoS. Affected versions include 12.0.9.149 and earlier, with the issue being exploitable via a user-tricked playback of a malicious Shockwave file; the exact vectors are not specified in the pr...

CVE-2014-0505

Adobe Shockwave Player before 12.1.0.150 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2014-0505: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Shockwave Player before 12.1.0.150 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

PT-2014-3670

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 12.1.0.150 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via unspecified vectors. Recommendations For Adobe Shockwave Play...

KLA10441 Vulnerability in Shockwave Player

An unspecified vulnerability was found in the Shockwave Player. By exploiting this vulnerability malicious users can execute arbitrary code or cause denial of service. Original advisories APSB Exploitation Related products Adobe-Shockwave-Player CVE list CVE-2014-0505 critical Solution Update to...

Shockwave Player <= 12.0.9.149 Unspecified Memory Corruption Vulnerabilities (APSB14-10)

The remote Windows host contains a version of Adobe's Shockwave Player that is prior to or equal to 12.0.9.149. It is, therefore, potentially affected by an unspecified memory corruption vulnerability. A remote attacker could exploit this issue by tricking a user into viewing a malicious Shockwav...

Adobe Releases Security Update for Shockwave Player

Adobe has released a security update to address a critical vulnerability in Adobe Shockwave Player 12.0.9.149 and earlier versions for Windows and Macintosh operating systems. Exploitation of this vulnerability could allow an attacker to remotely take control of the affected system. Users and...

APSB14-10 Security update available for Adobe Shockwave Player

Adobe has released a security update for Adobe Shockwave Player 12.0.9.149 and earlier versions on the Windows and Macintosh operating systems. This update addresses a critical vulnerability that could potentially allow an attacker to remotely take control of the affected system. Adobe recommends...

Adobe Shockwave Player内存破坏漏洞(CVE-2014-0500)

BUGTRAQ ID: 65490 CVECAN ID: CVE-2014-0500 Adobe Shockwave Player是播放使用Macromedia和Adobe Director制作的网页内容的软件。 Adobe Shockwave Player 12.0.7.148及之前版本在实现上存在远程内存破坏漏洞，攻击者可利用此漏洞在受影响应用用户上下文中执行任意代码。 0 Adobe Shockwave Player 12.0.7.148 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（apsb14-06）以及相应补丁: apsb14-06：Adobe...

Adobe Shockwave Player Multiple Memory Corruption Vulnerabilities (Feb 2014) - Mac OS X

Adobe Shockwave Player is prone to multiple memory corruption vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...