Adobe Shockwave Player Chunk Parsing Out of Bounds (APSB12-13) - Ver2 (CVE-2012-2031)

A remote code execution vulnerability has been reported in Adobe Shockwave player. The vulnerability is due to a memory corruption error while parsing crafted data in an rcsL chunk within a DIR media file. A remote attacker can exploit this issue by enticing a target user to open a specially...

Adobe Shockwave Player Multiple Vulnerabilities (Windows) - Nov 2011

This host is installed with Adobe Shockwave Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeshockwaveplayermultvulnnov11win.nasl 5424 2017-02-25 16:52:36Z teissa $ Adobe Shockwave Player Multiple Vulnerabilities Windows - Nov 2011 Authors: Madhuri D...

CVE-2011-2122: Improper Restriction of Operations within the Bounds of a Memory Buffer

Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors related to rcsL substructures, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0319, CVE-2011-0320,...

PT-2011-3599

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.6.0.626 Description The issue is related to multiple integer overflows in Dirapi.dll, which allows attackers to execute arbitrary code. Additionally, there are remote code execution vulnerabilities...

PT-2011-2278

Name of the Vulnerable Software and Affected Versions Adobe Shockwave affected versions not specified Description The issue is related to remote code execution vulnerabilities in Adobe Shockwave. There are multiple vulnerabilities, including those related to parsing of the rcsL chunk, Director fi...

PT-2011-3609

Name of the Vulnerable Software and Affected Versions Adobe Shockwave affected versions not specified Description The issue is related to remote code execution due to a problem in string parsing within the rcsL component. Recommendations At the moment, there is no information about a newer versio...

CVE-2010-3653

The Director module dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in th...

PT-2010-4992

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.5.9.615 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption. This can be achieved via a Director movie with a crafted rcsL...

CVE-2010-3653: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Director module dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in th...

Adobe Shockwave Player Director file 'rcsL' chunk parsing vulnerability

Overview Adobe Shockwave Player 11.5.8.612 and earlier versions on the Windows and Macintosh operating systems contain a critical vulnerability in the handling of "rcsL" chunks. Description Adobe Macromedia Shockwave Player is software that plays active web content developed in Macromedia and Ado...

VulnCheck KEV: CVE-2010-3653

The Director module dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in th...

Adobe Shockwave rcsL Memory Corruption

This module exploits a weakness in the Adobe Shockwave player's handling of Director movies .DIR. A memory corruption vulnerability occurs through an undocumented rcsL chunk. Module Options msf use exploit/windows/browser/adobe/shockwavercslcorruption msf undefinedshockwavercslcorruption show...

CVE-2010-2867

DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly handle a certain return value associated with the rcsL chunk in a Director movie, which allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted movie, related to a...

CVE-2010-2873: Improper Input Validation

Adobe Shockwave Player before 11.5.8.612 does not properly validate offset values in the rcsL RIFF chunks of 1 .DIR and 2 .DCR Director movies, which allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted movie...

Adobe Shockwave Director rcsL Chunk Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Shockwave Player Director文件分析RCSL指针覆盖漏洞

CVE ID: CVE-2010-1280. Code Audit Labs http://www.vulnhunt.com 在Adobe’s Shockwave Player软件中 发现一个漏洞，该漏洞允许远程攻击者受害者的机器上任意执行代码。 触发该漏洞需要用户访问一个畸形的web页面。 该漏洞存在于当shockwave player分析Director文件时，错误的使用了文件中的一个变量，导致发生4字节的内存被重写。成功利用该漏洞，攻击者可远程控制受害者机器。 11.5.2.602 ,11.5.6.606 and prior 厂商补丁： adobe ---------...