CVE-2013-0635: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

Shockwave Player <= 11.6.8.638 Multiple Vulnerabilities (APSB13-06)

The remote Windows host contains a version of Adobe's Shockwave Player that is equal to or earlier than 11.6.8.638 and is, therefore, potentially affected by the following vulnerabilities : - An unspecified memory corruption error exists that could lead to denial or potentially arbitrary code...

Deja Vu: Another Adobe Flash Player Security Update Released

What’s better than one Flash Player update a week? Why two, of course. Adobe released its regularly scheduled security updates today, including another set of fixes for its ubiquitous Flash Player, less than a week after an emergency patch took care of two zero-day vulnerabilities being exploited...

Adobe Shockwave Player Multiple Vulnerabilities Jan-2013 (Windows)

This host is installed with Adobe Shockwave Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeshockwaveplayermultvulnjan13win.nasl 7584 2017-10-26 12:15:30Z cfischer $ Adobe Shockwave Player Multiple Vulnerabilities Jan-2013 Windows Authors: Rachana Shetty...

Adobe Shockwave Player Multiple Vulnerabilities Jan-2013 (Mac OS X)

This host is installed with Adobe Shockwave Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeshockwaveplayermultvulnjan13macosx.nasl 6093 2017-05-10 09:03:18Z teissa $ Adobe Shockwave Player Multiple Vulnerabilities Jan-2013 Mac OS X Authors: Rachana Shetty...

Adobe Shockwave Player Multiple Vulnerabilities (Jan 2013) - Mac OS X

Adobe Shockwave Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Shockwave Player Multiple Vulnerabilities (Jan 2013) - Windows

Adobe Shockwave Player is prone to multiple vulnerabilities. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

CVE-2012-6271

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie that contains an Xtra URL, as demonstrated by a URL for an outdated Xtra...

CVE-2012-6270

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of a Shockwave Player 10.4.0.025 compatibility feature via a crafted HTML document that references Shockwave content with a certain compatibility parameter, related to a "downgrading" attack...

Design/Logic Flaw

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of a Shockwave Player 10.4.0.025 compatibility feature via a crafted HTML document that references Shockwave content with a certain compatibility parameter, related to a "downgrading" attack...

Design/Logic Flaw

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie that contains an Xtra URL, as demonstrated by a URL for an outdated Xtra...

CVE-2012-6270

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of a Shockwave Player 10.4.0.025 compatibility feature via a crafted HTML document that references Shockwave content with a certain compatibility parameter, related to a "downgrading" attack...

CVE-2012-6271

Adobe Shockwave Player (Windows and Mac OS X) up to version 11.6.8.638 is affected by CVE-2012-6271: a Shockwave movie containing an Xtra URL can trigger installation of arbitrary signed Xtras, which can allow remote code execution. Root cause described in the CVE entry is the ability to install ...

CVE-2012-6270

CVE-2012-6270 concerns Adobe Shockwave Player up to version 11.6.8.638. A crafted HTML document referencing Shockwave content with a specific compatibility parameter can trigger installation of the Shockwave 10.4.0.025 compatibility feature, enabling a “downgrading” scenario. Publicly available s...

CVE-2012-6271

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie that contains an Xtra URL, as demonstrated by a URL for an outdated Xtra...

PT-2012-6256

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.6.8.638 Description The issue allows remote attackers to trigger the installation of a compatibility feature for an older version of the software via a crafted HTML document. This is related to a...

PT-2012-6257

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.6.8.638 Description The issue allows remote attackers to trigger the installation of arbitrary signed Xtras via a Shockwave movie that contains an Xtra URL. This can be demonstrated by a URL for an...

CVE-2012-6271: Undefined Security Weakness

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie that contains an Xtra URL, as demonstrated by a URL for an outdated Xtra...

CVE-2012-6270: Undefined Security Weakness

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of a Shockwave Player 10.4.0.025 compatibility feature via a crafted HTML document that references Shockwave content with a certain compatibility parameter, related to a "downgrading" attack...

US-CERT Warns of Adobe Shockwave Xtras Vulnerabilities

UPDATE — US-CERT issued advisories against a trio of Adobe Shockwave vulnerabilities that could allow an attacker to remotely execute code on systems running the vulnerable media player. The most disturbing aspect to this warning is that this issue was reported to Adobe in 2010 regarding Shockwav...