Lucene search
+L

9854 matches found

securityvulns
securityvulns
•added 2010/08/26 12:00 a.m.•58 views

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2868

I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file CVE-2010-2868...

9.3CVSS0.6AI score0.04674EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2010/08/25 12:00 a.m.•39 views

Adobe Shockwave Player IML32.dll Memory Corruption (APSB10-20; CVE-2010-2864)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

9.3CVSS6.5AI score0.04674EPSS
SaveExploits0
htbridge
htbridge
•added 2010/08/09 12:00 a.m.•33 views

Multiple Vulnerabilities in CompuCMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities CompuCMS, which could be exploited to perform cross-site scripting and SQL Injection attacks. 1 Cross-site scripting XSS vulnerabilities in CompuCMS 1.1 The vulnerability exists due to input sanitation error in the...

7.5CVSS7.8AI score
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/07/07 12:00 a.m.•8 views

CVE-2010-2655: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in private/filemanagement.php on the IBM BladeCenter with Advanced Management Module AMM firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allows remote authenticated users to list arbitrary directories and possibly have unspecified other...

4CVSS6AI score0.02291EPSS
SaveExploits2References2
zdt
zdt
•added 2010/05/31 12:00 a.m.•28 views

linux/x86 sys_mkdir("/tmp/dir",1) shellcode 38 bytes

Exploit for linux/x86 platform in category shellcode ==================================================== linux/x86 sysmkdir"/tmp/dir",1 shellcode 38 bytes ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ ...

7AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2010/05/26 12:00 a.m.•62 views

Update Protection against Adobe Shockwave Player DIR Files PAMI Chunk Code Execution Vulnerability (APSB10-12)

A remote code execution vulnerability has been identified in Adobe Shockwave Player. Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. An attacker can exploi...

9.3CVSS8.7AI score0.06369EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2010/05/23 12:00 a.m.•67 views

Adobe Shockwave Player DIR Files PAMI Chunk Code Execution (APSB10-12; CVE-2010-1292)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A remote code execution vulnerability has been identified in Adobe Shockwave Player. An attacker can exploi...

9.3CVSS8.7AI score0.06369EPSS
SaveExploits0
Packet Storm
Packet Storm
•added 2010/05/19 12:00 a.m.•39 views

Lokomedia CMS File Disclosure

Title : Local File Disclosure Vulnerability Lokomedia CMS sukaCMS + Vendor : http://bukulokomedia.com + Discovered : vir0e5 a.k.a banditc0de + Contact : vir0e5athackermaildotcom + Site : http://vir0e5.blogspot.com + DorK : inurl:/downlot.php?file= + Exploit :...

7.4AI score
SaveExploits0
NVD
NVD
•added 2010/05/13 5:30 p.m.•47 views

CVE-2010-1280

Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted .dir aka Director file, related to 1 an erroneous dereference and 2 a certain Shock.dir file...

9.3CVSS8.8AI score0.16637EPSS
SaveExploits8References8
Prion
Prion
•added 2010/05/13 5:30 p.m.•35 views

Memory corruption

iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted .dir aka Director file...

9.3CVSS8.1AI score0.07484EPSS
SaveExploits0References6Affected Software1
Prion
Prion
•added 2010/05/13 5:30 p.m.•32 views

Design/Logic Flaw

Adobe Shockwave Player before 11.5.7.609 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted ATOM size in a .dir aka Director file...

4.3CVSS6.9AI score0.02973EPSS
SaveExploits1References7Affected Software1
Prion
Prion
•added 2010/05/13 5:30 p.m.•28 views

Memory corruption

Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir aka Director files, which allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a modified field in a 0xFFFFFF49 record...

9.3CVSS8.2AI score0.0627EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2010/05/13 5:00 p.m.•38 views

CVE-2010-0130

Integer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via a crafted .dir aka Director file...

8.9AI score0.07306EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2010/05/13 5:00 p.m.•44 views

CVE-2010-1280

Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted .dir aka Director file, related to 1 an erroneous dereference and 2 a certain Shock.dir file...

8.9AI score0.16637EPSS
SaveExploits8References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/05/13 12:00 a.m.•6 views

CVE-2010-1281: Out-of-bounds Write

iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted .dir aka Director file...

9.3CVSS6.5AI score0.07484EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/05/13 12:00 a.m.•5 views

CVE-2010-0129: Integer Overflow or Wraparound

Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted .dir aka Director file that triggers an array index error...

9.3CVSS6.4AI score0.06301EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/05/13 12:00 a.m.•6 views

CVE-2010-1283: Out-of-bounds Write

Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir aka Director files, which allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a modified field in a 0xFFFFFF49 record...

9.3CVSS6.5AI score0.0627EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/05/13 12:00 a.m.•5 views

CVE-2010-1282: Loop with Unreachable Exit Condition

Adobe Shockwave Player before 11.5.7.609 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted ATOM size in a .dir aka Director file...

6.5CVSS5.8AI score0.02973EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/05/13 12:00 a.m.•5 views

CVE-2010-1292: Improper Restriction of Operations within the Bounds of a Memory Buffer

The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafte...

9.3CVSS6.5AI score0.06369EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/05/13 12:00 a.m.•4 views

CVE-2010-0130: Integer Overflow or Wraparound

Integer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via a crafted .dir aka Director file...

9.3CVSS6.5AI score0.07306EPSS
SaveExploits0References2
Rows per page
Query Builder