CVE-2011-2108

CVE-2011-2108 affects Adobe Shockwave Player prior to version 11.6.0.626. The vulnerability is described as an arbitrary code execution flaw due to a design flaw, with unspecified vectors. The issue is listed across multiple sources (NVD entry for CVE-2011-2108 and vulnerability references in Nes...

CVE-2011-2121

Adobe Shockwave Player is affected by CVE-2011-2121 due to an integer overflow in the AudioMixer.x32 module when parsing mixer structures from Director files. This can allow remote code execution under the user’s context, with exploitation requiring user interaction (per ZDI). Affected product/ve...

CVE-2011-2126

Buffer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors...

CVE-2011-2117

Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2124, CVE-2011-2127, and CVE-2011-2128...

CVE-2011-2121

Integer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors...

CVE-2011-0319

Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0320, CVE-2011-0335, CVE-2011-2119, and CVE-2011-2122...

CVE-2011-2114

Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-2117, CVE-2011-2124, CVE-2011-2127, and CVE-2011-2128...

CVE-2011-2114

CVE-2011-2114 affects Adobe Shockwave Player (Shockwave 3D Asset.x32 DEMX) and is described by ZDI as a remote code execution via a crafted DEMX chunk in the RIFF-based Director format. The vulnerability causes heap memory overwrite during parsing and requires user interaction (visiting a malicio...

CVE-2011-2109

Multiple integer overflows in Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary code via unspecified vectors...

CVE-2011-2118

The FLV ASSET Xtra component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to an "input validation vulnerability."...

CVE-2011-2124

Adobe Shockwave Player before 11.6.0.626 is affected by CVE-2011-2124, a memory corruption vulnerability that can allow arbitrary code execution or cause a denial of service via unspecified vectors. The vulnerability is part of a broader set of issues affecting Shockwave, with multiple CVEs liste...

CVE-2011-2119

Technical details about CVE-2011-2119 are not publicly provided in the supplied documents. Monitor for updates; Initial description notes a Dirapi.dll memory corruption/arbitrary code risk in Adobe Shockwave Player prior to 11.6.0.626, but no further specifics are present here.

CVE-2011-0318

Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0319, CVE-2011-0320, CVE-2011-0335, CVE-2011-2119, and CVE-2011-2122...

CVE-2011-0317

Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0318, CVE-2011-0319, CVE-2011-0320, CVE-2011-0335, CVE-2011-2119, and CVE-2011-2122...

CVE-2011-2123

CVE-2011-2123 affects Adobe Shockwave Player’s Shockwave 3D Asset x32 component. The vulnerability is described as an integer overflow in a DEMX subrecord during parsing, causing a heap-based buffer overflow and enabling remote code execution. Public references identify affected versions as Shock...

CVE-2011-2109

Adobe Shockwave Player contains multiple memory corruption and integer overflow vulnerabilities in Dirapi.dll that can lead to arbitrary code execution. CVE-2011-2109 is tied to multiple integer overflows in Dirapi.dll, with root cause in size/length handling during parsing (rcsL/Director file fo...

CVE-2011-2127

Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2117, CVE-2011-2124, and CVE-2011-2128...

CVE-2011-2126

Adobe Shockwave Player is affected by CVE-2011-2126 (buffer overflow) with impact described as arbitrary code execution via unspecified vectors. The connected Nessus/OpenVAS details indicate affected versions are Shockwave Player up to 11.5.9.620, and the issue is addressed by upgrading to versio...

Adobe Patches Critical Bugs in Flash, Reader, Acrobat

Adobe has released a number of patches for critical vulnerabilities in several of its more popular applications, including Flash, Reader and Acrobat. The most severe of the vulnerabilities that Adobe fixed Tuesday is a flaw in Flash that is being used in targeted attacks right now through...

Adobe Shockwave Shockwave 3d Asset.x32 DEMX Chunk Substructure Count Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...