Adobe Shockwave rcsL Memory Corruption

This module exploits a weakness in the Adobe Shockwave player's handling of Director movies .DIR. A memory corruption vulnerability occurs through an undocumented rcsL chunk. Module Options msf use exploit/windows/browser/adobe/shockwavercslcorruption msf undefinedshockwavercslcorruption show...

Adobe Shockwave Player - 'rcsL chunk' Memory Corruption

Abysssec Inc Public Advisory 1 Advisory information Title : Adobe Shockwave player rcsL chunk memory corruption Version : Adobe Shockwave player 11.5.8.612 latest on writing time Discovery : http://www.abysssec.com Vendor : http://www.adobe.com Impact : Critical Contact : shahin at abysssec.com ,...

VulnCheck KEV: CVE-2010-3653

The Director module dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited...

Mobile Credits Used as Phishing Lure

Customers of an Italian bank were lured into a phishing scam with promises of mobile phone airtime credits, according to a blog post from analyst Mathew Maniyara on Symantec’s Connect blog. According to Maniyara, phishers posing under the guise of an Italian bank, are using a U.S.-based Web site ...

Adobe Shockwave Director tSAC Chunk Parsing Memory Corruption (CVE-2010-2866)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A remote code execution vulnerability has been identified in Adobe Shockwave Player. The vulnerability is d...

Adobe Shockwave Player Director File FFFFFF88 Record Integer Overflow (CVE-2010-2876; CVE-2010-4192)

Adobe Shockwave is a multimedia player that allows users to view interactive web content such as games, business presentations, entertainment, and advertisements from the web browser. It allows Adobe Director applications to be published on the Internet and viewed in a web browser on systems whic...

Month Of Abysssec Undisclosed Bugs - Adobe Shockwave Director

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | """ htmlTest = open'poc.html', 'wb' htmlTest.writetemp htmlTest.close sampleFile = open'sample.dir','rb' pocFile = open"poc.DIR",'wb' pocFile.writesampleFile.read-1 sampleFile.close pocFile.seek13168...

Adobe Shockwave Director tSAC Chunk Memory Corruption

Exploit for windows platform in category dos / poc ===================================================== Adobe Shockwave Director tSAC Chunk Memory Corruption ===================================================== Title : Adobe Shockwave Director tSAC Chunk memory corruption Version : dirapi.dll...

Adobe Shockwave Director tSAC - Chunk Memory Corruption

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | """ htmlTest = open'poc.html', 'wb' htmlTest.writetemp htmlTest.close sampleFile = open'sample.dir','rb' pocFile = open"poc.DIR",'wb' pocFile.writesampleFile.read-1 sampleFile.close pocFile.seek13168...

Adobe Shockwave Director tSAC - Chunk Memory Corruption

Adobe Shockwave Director tSAC - Chunk Memory Corruption ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | """ htmlTest = open'poc.html', 'wb' htmlTest.writetemp htmlTest.close sampleFile = open'sample.dir','rb' pocFile = open"poc.DIR",'wb'...

CVE-2010-2875

Integer signedness error in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a length value associated with the tSAC chunk in a Director movie...

CVE-2010-2867

DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly handle a certain return value associated with the rcsL chunk in a Director movie, which allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted movie, related to a...

Memory corruption

Adobe Shockwave Player before 11.5.8.612 does not properly validate an offset value in the pami RIFF chunk in a Director movie, which allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted movie...

Null pointer dereference

DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly handle a certain return value associated with the rcsL chunk in a Director movie, which allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted movie, related to a...

Integer overflow

Integer overflow in the 3D object functionality in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted size value in a 0xFFFFFF45 RIFF record in a Director movie...

Integer overflow

Integer signedness error in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a length value associated with the tSAC chunk in a Director movie...

CVE-2010-2866

Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a count value associated with an "undocumented structure" and the tSAC chunk in a Director movie...

Adobe Shockwave Player rcsL Chunk Symbol Access Violations (APSB10-20; CVE-2010-2882)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

Adobe Shockwave Player IML32.dll Memory Corruption (APSB10-20; CVE-2010-2864)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

Adobe Shockwave Player CASt Parsing Memory Corruption (APSB10-20; CVE-2010-2868)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...