Adobe Shockwave Player <= 11.5.6.606 Multiple Vulnerabilities (APSB10-12) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is 11.5.6.606 or earlier. It is, therefore, affected by multiple vulnerabilities : - Processing specially crafted FFFFFF45h Shockwave 3D blocks results in memory corruption. CVE-2010-0127, CVE-2010-1283 - A signedness erro...

CVE-2010-0129

Adobe Shockwave Player is affected by CVE-2010-0129 due to multiple integer overflows leading to memory corruption via specially crafted Director (.dir) files. The vulnerability affects Shockwave Player prior to 11.5.7.609 and can enable remote memory corruption or potential arbitrary code execut...

Secunia Research: Adobe Shockwave Player Array Indexing Vulnerability

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player Array Indexing Vulnerability - ====================================================================== Table of Contents Affected...

Adobe Shockwave Player Director文件分析整型溢出漏洞

CVE ID: CVE-2010-0129 Code Audit Labs http://www.vulnhunt.com 在Adobe’s Shockwave Player软件中 发现一个漏洞，该漏洞允许远程攻击者受害者的机器上任意执行代码。 触发该漏洞需要用户访问一个畸形的web页面。 该漏洞存在于当shockwave player分析Director文件时，错误的使用了16位的符号整型向32位的符号整型，导致整型过大，随后又导致一个整型溢出。成功利用该漏洞，攻击者可远程控制受害者机器。 11.5.2.602 ,11.5.6.606 and prior 厂商补丁： adobe...

iDefense Security Advisory 05.11.10: Abobe Shockwave Player Heap Memory Indexing Vulnerability

iDefense Security Advisory 05.11.10 http://labs.idefense.com/intelligence/vulnerabilities/ May 11, 2010 I. BACKGROUND Adobe Shockwave Player is a popular Web browser plugin. It is available for multiple Web browsers and platforms, including Windows, and MacOS. Shockwave Player enables Web browser...

[CAL-20100204-2]Adobe Shockwave Player Director File Parsing integer overflow vulnerability

CAL-20100204-2Adobe Shockwave Player Director File Parsing integer overflow vulnerability Affected Products ================= 11.5.2.602 ,11.5.6.606 and prior CVE ID: CVE-2010-0129 CAL ID: CAL-20100204-2 Vulnerability Details ===================== Code Audit Labs http://www.vulnhunt.com has...