Adobe ShockWave Player 11.5.1.601 Stack Overflow

Application: Adobe ShockWave Player 11.5.1.601 Platforms: Windows XP Professional French SP2 and SP3 crash: IE 6.0.2900.2180 Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details and bug 3 The Code =============== 1...

Adobe ShockWave Player SwDir.dll控件堆溢出漏洞

CVE ID: CVE-2009-3244 Adobe Shockwave Player是专门播放使用Director Shockwave Studio制作的网页的外挂软件。 Shockwave Player所提供的SwDir.dll ActiveX控件在播放恶意网页文件时存在堆溢出漏洞，用户受骗打开了包含有超长PlayerVersion属性值的HTML文件时就可能触发这个溢出，导致拒绝服务或执行任意代码。 Adobe Shockwave Player 11.5.1.601 临时解决方法： 为CLSID...

CVE-2009-3244: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PlayerVersion property value...

Adobe ShockWave Player 11.5.1.601 ActiveX Buffer Overflow PoC

No description provided by source. Application: Adobe ShockWave Player 11.5.1.601 Platforms: Windows XP Professional French SP2 and SP3 crash: IE 6.0.2900.2180 Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details and bug 3 T...

Adobe Shockwave Player 11.5.1.601 Buffer Overflow

Application: Adobe ShockWave Player 11.5.1.601 Platforms: Windows XP Professional French SP2 and SP3 crash: IE 6.0.2900.2180 Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details and bug 3 The Code =============== 1...

Adobe Shockwave Player 11.5.1.601 - ActiveX Buffer Overflow (PoC)

Adobe Shockwave Player 11.5.1.601 - ActiveX Buffer Overflow PoC Application: Adobe ShockWave Player 11.5.1.601 Platforms: Windows XP Professional French SP2 and SP3 crash: IE 6.0.2900.2180 Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2...

Adobe Shockwave Player 11.5.1.601 - ActiveX Buffer Overflow (PoC)

Application: Adobe ShockWave Player 11.5.1.601 Platforms: Windows XP Professional French SP2 and SP3 crash: IE 6.0.2900.2180 Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details and bug 3 The Code =============== 1...

Adobe ShockWave Player 11.5.1.601 ActiveX Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ============================================================= Adobe ShockWave Player 11.5.1.601 ActiveX Buffer Overflow PoC ============================================================= Application: Adobe ShockWave Player 11.5.1.601 Platforms:...

Macromedia ShockWave ActiveX multiple security vulnerabilities

SwDir.dll multiple methods buffer overflows...

CVE-2007-1403

Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote attackers to cause a denial of service Internet Explorer 7 crash and possibly execute arbitrary code via a long 1 BGCOLOR, 2 SRC, 3 AutoStart, 4 Sound, 5 DrawLogo, or 6...

CVE-2007-1403

The CVE-2007-1403 entry concerns the Macromedia Shockwave SwDir.dll ActiveX control (10.1.4.20) with remote denial of service and potential code execution via stack/buffer overflows in multiple properties (e.g., BGCOLOR, SRC, AutoStart, Sound, DrawLogo, DrawProgress). Connected advisories (CPAI-2...

CVE-2007-1403: Undefined Security Weakness

Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote attackers to cause a denial of service Internet Explorer 7 crash and possibly execute arbitrary code via a long 1 BGCOLOR, 2 SRC, 3 AutoStart, 4 Sound, 5 DrawLogo, or 6...

Macromedia Shockwave 10 SWDIR.DLL多个ActiveX控件远程拒绝服务漏洞

Macromedia Shockwave是专门播放使用Director Shockwave Studio制作的网页的外挂软件，也可以观看Flash网页。 Shockwave的SWDIR.DLL库中存在多个栈溢出漏洞，如果用户使用安装了Shockwave的浏览器访问恶意站点的话，就可能触发这些溢出，导致浏览器拒绝服务。 Macromedia Shockwave 10.1.4.20 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.macromedia.com/ pre codespan style="font: 10pt...

Macromedia 10.1.4.20 SwDir.dll Internet Explorer Stack Overflow DoS

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------- Macromedia SwDir.dll ver. 10.1.4.20 multiple methods Stack Overflow author: shinnai...

Macromedia 10.1.4.20 - SwDir.dll Internet Explorer Stack Overflow Denial of Service

Macromedia 10.1.4.20 - SwDir.dll Internet Explorer Stack Overflow Denial of Service ----------------------------------------------------------------------------- Macromedia SwDir.dll ver. 10.1.4.20 multiple methods Stack Overflow author: shinnai mail: shinnaiatautisticidotorg site:...

Macromedia 10.1.4.20 - 'SwDir.dll' Internet Explorer Stack Overflow Denial of Service

----------------------------------------------------------------------------- Macromedia SwDir.dll ver. 10.1.4.20 multiple methods Stack Overflow author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP Professional SP2 all patched, with Internet...

Macromedia 10.1.4.20 SwDir.dll Internet Explorer Stack Overflow DoS

Exploit for unknown platform in category dos / poc =================================================================== Macromedia 10.1.4.20 SwDir.dll Internet Explorer Stack Overflow DoS ===================================================================...

CVE-2006-6885

An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long string in the swURL attribute...

CVE-2006-6885

The CVE describes a vulnerability in Macromedia Shockwave 10 where an ActiveX control in SwDir.dll (SwDir ActiveX) can be abused by sending a long string in the swURL attribute to cause a denial of service (IE7 crash). Affected component: SwDir.dll ActiveX control within Shockwave 10. Root cause:...

CVE-2006-6885: Undefined Security Weakness

An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long string in the swURL attribute...