Buffer overflow

Buffer overflow in Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code via unspecified vectors...

Memory corruption

Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-1384...

Design/Logic Flaw

Adobe Shockwave Player before 12.0.2.122 does not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors...

Memory corruption

Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-1386...

CVE-2013-1385

Adobe Shockwave Player before 12.0.2.122 does not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors...

CVE-2013-1384

Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-1386...

CVE-2013-1386

Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-1384...

CVE-2013-1384

Adobe Shockwave Player versions before 12.0.2.122 are affected by CVE-2013-1384 and CVE-2013-1386 (and related advisories). The Red Hat entries corroborate that these flaws allow arbitrary code execution or memory corruption/DoS via unspecified vectors, with the CVEs distinguished from each other...

CVE-2013-1385

CVE-2013-1385 affects Adobe Shockwave Player prior to 12.0.2.122. The vulnerability allows access to address information that can be used to bypass ASLR, via unspecified vectors. Affected product is Adobe Shockwave Player; root cause is failure to prevent leakage of address information, enabling ...

CVE-2013-1383

Buffer overflow in Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code via unspecified vectors...

CVE-2013-1383

Adobe Shockwave Player is affected by CVE-2013-1383: a buffer overflow in versions before 12.0.2.122 that can lead to arbitrary code execution. Root cause is a buffer overflow in the Shockwave Player component. The vulnerability is discussed across multiple sources (Red Hat advisory, Nessus/OpenV...

CVE-2013-1386

CVE-2013-1386 affects Adobe Shockwave Player prior to version 12.0.2.122. The Red Hat advisories and vulnerability listings describe an arbitrary code execution or memory corruption vulnerability via unspecified vectors (distinct from CVE-2013-1384). Affected component: Shockwave Player; impact: ...

Security Update Available for Adobe Shockwave Player

Adobe has released a security update for Adobe Shockwave Player 12.0.0.112 and earlier versions for Windows and Macintosh to address multiple vulnerabilities. These vulnerabilities could allow an attacker to execute arbitrary code on the affected system. US-CERT recommends that users and...

PT-2013-3121

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 12.0.2.122 Description A buffer overflow issue allows attackers to execute arbitrary code via unspecified vectors. Recommendations For versions prior to 12.0.2.122, update to version 12.0.2.122 or later...

PT-2013-3122

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 12.0.2.122 Description The issue allows attackers to execute arbitrary code or cause a denial of service due to memory corruption via unspecified vectors. Recommendations For Adobe Shockwave Player...

PT-2013-3124

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 12.0.2.122 Description The issue allows attackers to execute arbitrary code or cause a denial of service due to memory corruption via unspecified vectors. Recommendations For versions prior to 12.0.2.12...

CVE-2013-1384: Undefined Security Weakness

Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-1386...

CVE-2013-1385: Undefined Security Weakness

Adobe Shockwave Player before 12.0.2.122 does not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors...

PT-2013-3123

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 12.0.2.122 Description The issue allows attackers to bypass the ASLR protection mechanism, making it easier to exploit the system via unspecified vectors. This is due to the software not preventing acce...

CVE-2013-1383: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code via unspecified vectors...