CVE-2010-2581

CVE-2010-2581 is a memory-corruption vulnerability in Adobe Shockwave Player affecting the DIRAPI.dll module. According to the provided sources, it is triggered by parsing a crafted Director file with a malformed pamm chunk (invalid size or sub-chunk count), leading to potential arbitrary code ex...

CVE-2010-4090

Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2010-4085

CVE-2010-4085 affects Adobe Shockwave Player (dirapi.dll) prior to version 11.5.9.615. The vulnerability is a memory corruption issue that can lead to arbitrary code execution or a denial of service via unspecified vectors. Affected software: Adobe Shockwave Player (Windows/macOS) with the vulner...

CVE-2010-4084

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2581, CVE-2010-4085, CVE-2010-4086, and CVE-2010-4088...

CVE-2010-4085

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2581, CVE-2010-4084, CVE-2010-4086, and CVE-2010-4088...

CVE-2010-4088

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a .dir file with "duplicated references to the same KEY chunk," a different vulnerability than CVE-2010-2581, CVE-2010-4084, CVE-2010-4085, and...

CVE-2010-3655

Stack-based buffer overflow in dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code via unspecified vectors...

CVE-2010-4087

Adobe Shockwave Player (IML32.dll) is affected by CVE-2010-4087: memory corruption via a crafted .dir mmap record with an invalid VSWV entry length, leading to possible arbitrary code execution or denial of service. This vulnerability is described as existing in Shockwave Player before version 11...

CVE-2010-4086

CVE-2010-4086 affects Adobe Shockwave Player prior to 11.5.9.615. The vulnerability resides in the dirapi.dll component and is triggered by a crafted Director (.dir) media file with an invalid element size, leading to arbitrary code execution or memory corruption (also described as potential DoS)...

CVE-2010-4088

CVE-2010-4088 affects Adobe Shockwave Player prior to 11.5.9.615, via the DIRAPI.dll path where parsing a .dir media file with duplicated KEY* references can cause memory corruption, enabling code execution or a crash. Affected component: Shockwave Player (DIRAPI.dll); vulnerable condition: malfo...

Adobe Shockwave Player Lnam Chunk String Processing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Shockwave Player Director File SetVertexArray Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within code...

Adobe Shockwave Player MMAP Entry Size Memory Corruption (APSB10-25; CVE-2010-4084; CVE-2010-4086)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

Adobe Shockwave Player Duplicate Keys Memory Corruption (APSB10-25; CVE-2010-4088)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

Shockwave Player < 11.5.9.615

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.9.615. Such versions are potentially affected by the following issues : - A memory corruption issue exists that could lead to code execution. Note that there are reports this issue is being exploited ...

Adobe Shockwave Player Duplicate LSCM Records Memory Corruption (APSB10-25; CVE-2010-4089)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

Adobe Shockwave Player CSWV Record Length Memory Corruption (APSB10-25; CVE-2010-4087)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

Adobe Shockwave Director rcsL Chunk Remote Code Execution (APSA10-04; CVE-2010-3653)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. An attacker can exploit th...

CVE-2010-3653

The Director module dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in th...

Memory corruption

The Director module dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in th...