Secunia Research: Adobe Shockwave Player Signedness Error Vulnerability

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player Signedness Error Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Adobe Shockwave Player Asset Entry Parsing Vulnerability

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player Asset Entry Parsing Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Adobe Shockwave Player Font Processing Buffer Overflow

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player Font Processing Buffer Overflow - ====================================================================== Table of Contents Affected...

VUPEN Security Research - Adobe Shockwave 3D Two Remote Code Execution Vulnerabilities (CVE-2010-1284)

VUPEN Security Research - Adobe Shockwave 3D Two Code Execution Vulnerabilities CVE-2010-1284 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to some of th...

Secunia Research: Adobe Shockwave Player Integer Overflow Vulnerability

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

VUPEN Security Research - Adobe Shockwave IML32 Multiple Code Execution Vulnerabilities (CVE-2010-0129)

VUPEN Security Research - Adobe Shockwave IML32 Multiple Code Execution Vulnerabilities CVE-2010-0129 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to so...

Adobe Shockwave Player 11.5.6.606 - DIR Multiple Memory Vulnerabilities

Adobe Shockwave Player 11.5.6.606 - DIR Multiple Memory Vulnerabilities / Title: Adobe Shockwave Player 11.5.6.606 DIR Multiple Memory Vulnerabilities Vendor: Adobe Systems Incorporated Product web page: http://www.adobe.com Summary: Over 450 million Internet-enabled desktops have installed Adobe...

Adobe Shockwave Player 11.5.6.606 (DIR) Multiple Memory Vulnerabilities

Exploit for windows platform in category dos / poc ======================================================================= Adobe Shockwave Player 11.5.6.606 DIR Multiple Memory Vulnerabilities ======================================================================= / Title: Adobe Shockwave Player...

Adobe Shockwave Player Director文件分析整型溢出漏洞

CVE ID: CVE-2010-0129 Code Audit Labs http://www.vulnhunt.com 在Adobe’s Shockwave Player软件中 发现一个漏洞，该漏洞允许远程攻击者受害者的机器上任意执行代码。 触发该漏洞需要用户访问一个畸形的web页面。 该漏洞存在于当shockwave player分析Director文件时，错误的使用了16位的符号整型向32位的符号整型，导致整型过大，随后又导致一个整型溢出。成功利用该漏洞，攻击者可远程控制受害者机器。 11.5.2.602 ,11.5.6.606 and prior 厂商补丁： adobe...

Shockwave Player < 11.5.7.609 Multiple Vulnerabilities (APSB10-12)

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.7.609. Such versions are affected by the following issues : - Processing specially crafted FFFFFF45h Shockwave 3D blocks can result in memory corruption. CVE-2010-0127, CVE-2010-1283 - A signedness...

Adobe Shockwave Player 11.5.6.606 - 'DIR' Multiple Memory Vulnerabilities

/ Title: Adobe Shockwave Player 11.5.6.606 DIR Multiple Memory Vulnerabilities Vendor: Adobe Systems Incorporated Product web page: http://www.adobe.com Summary: Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to some of the best the...

Secunia Research: Adobe Shockwave Player 3D Parsing Memory Corruption

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player 3D Parsing Memory Corruption - ====================================================================== Table of Contents Affected...

[CAL-20100204-3]Adobe Shockwave Player Director File Parsing RCSL Pointer Overwrite

CAL-20100204-3Adobe Shockwave Player Director File Parsing RCSL Pointer Overwrite Affected Products ================= 11.5.2.602 ,11.5.6.606 and prior CVE ID: CVE-2010-1280 CAL ID: CAL-20100204-3 Vulnerability Details ===================== Code Audit Labs http://www.vulnhunt.com has discovered a...

Adobe Shockwave Player Director文件分析RCSL指针覆盖漏洞

CVE ID: CVE-2010-1280. Code Audit Labs http://www.vulnhunt.com 在Adobe’s Shockwave Player软件中 发现一个漏洞，该漏洞允许远程攻击者受害者的机器上任意执行代码。 触发该漏洞需要用户访问一个畸形的web页面。 该漏洞存在于当shockwave player分析Director文件时，错误的使用了文件中的一个变量，导致发生4字节的内存被重写。成功利用该漏洞，攻击者可远程控制受害者机器。 11.5.2.602 ,11.5.6.606 and prior 厂商补丁： adobe ---------...

ZDI-10-089: Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability

ZDI-10-089: Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-089 May 11, 2010 -- CVE ID: CVE-2010-1292 -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave Player -- TippingPointTM IPS Customer Protection:...

[CAL-20100204-2]Adobe Shockwave Player Director File Parsing integer overflow vulnerability

CAL-20100204-2Adobe Shockwave Player Director File Parsing integer overflow vulnerability Affected Products ================= 11.5.2.602 ,11.5.6.606 and prior CVE ID: CVE-2010-0129 CAL ID: CAL-20100204-2 Vulnerability Details ===================== Code Audit Labs http://www.vulnhunt.com has...

Adobe Shockwave Player Director文件分析ATOM size无限循环漏洞

CVE ID: CVE-2010-1282 Code Audit Labs http://www.vulnhunt.com 在Adobe’s Shockwave Player软件中 发现一个漏洞，触发该漏洞需要用户访问一个畸形的web页面。 该漏洞存在于当shockwave player分析atom size时，不当处理导致代码无限循环。 成功利用能导致cpu 100%,造成拒绝服务攻击。 11.5.2.602 ,11.5.6.606 and prior 厂商补丁： adobe --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版...

[CAL-20100204-1]Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability

CAL-20100204-1Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability Affected Products ================= 11.5.2.602 ,11.5.6.606 and prior CVE ID: CVE-2010-1282 CAL ID: CAL-20100204-1 Vulnerability Details ===================== Code Audit Labs http://www.vulnhunt.com ha...

Adobe Shockwave Player 0xFFFFFF49 Record Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the code responsible for parsing 3D objec...

Adobe Shockwave Player 11.5.6.606 (DIR) Multiple Memory Vulnerabilities

Summary Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to some of the best the Web has to offer - including dazzling 3D games and entertainment, interactive product demonstrations, and online learning applications. Shockwave Player...