CVE-2011-2117

Adobe Shockwave Player (pre-11.6.0.626) is affected by multiple memory corruption/unspecified-vulnerability defects that can lead to arbitrary code execution or memory corruption, including CVEs such as 2011-2117. The issues affect multiple components (e.g., Dirapi.dll, IML32.dll, Shockwave3DAsse...

CVE-2011-0335

CVE-2011-0335 affects Adobe Shockwave Player and is tied to Dirapi.dll. The initial description states that before version 11.6.0.626, users could trigger arbitrary code execution or memory corruption via unspecified vectors, with possible DoS. Connected sources corroborate multiple CVEs in the s...

CVE-2011-2116

CVE-2011-2116 affects Adobe Shockwave Player; the vulnerability arises from parsing the Lnam chunk in Shockwave’s RIFF-based Director files, causing memory corruption in IML32.dll and enabling remote code execution. Affected product: Adobe Shockwave Player (IML32.dll). Impact: remote arbitrary co...

CVE-2011-0318

Adobe Shockwave Player (Mac OS X)

CVE-2011-2118

Adobe Shockwave Player is affected by CVE-2011-2118 due to an input-validation vulnerability in the FLV Asset Xtra component, prior to version 11.6.0.626. This vulnerability enables arbitrary code execution. Multiple connected advisories confirm the issue and reference the targeted Shockwave comp...

CVE-2011-2128

Adobe Shockwave Player is affected by CVE-2011-2128 as part of a set of memory‑corruption vulnerabilities that can lead to arbitrary code execution. The ZDI advisory ZDI-11-221 describes remote code execution via the Shockwave 3D Asset.x32 vector (and notes user interaction is required), and the ...

CVE-2011-0320

Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0319, CVE-2011-0335, CVE-2011-2119, and CVE-2011-2122...

CVE-2011-2126

Buffer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors...

CVE-2011-0335

Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0319, CVE-2011-0320, CVE-2011-2119, and CVE-2011-2122...

CVE-2011-2112

Adobe Shockwave Player (Windows/macOS) is affected by CVE-2011-2112 due to multiple buffer overflows in IML32.dll. This can allow remote code execution and requires exploitation of unspecified vectors. Affected versions are before 11.6.0.626; patching to 11.6.0.626 (or newer) is the remediation s...

CVE-2011-2113

CVE-2011-2113 affects Adobe Shockwave Player, specifically the Shockwave3DAsset component. It stems from buffer overflows/memory corruption in the Shockwave3DAsset/DEM X chunk handling, allowing arbitrary code execution. Affected product: Shockwave Player prior to 11.6.0.626. Vendor patch APSB11-...

CVE-2011-2121

Adobe Shockwave Player is affected by CVE-2011-2121 due to an integer overflow in the AudioMixer.x32 module when parsing mixer structures from Director files. This can allow remote code execution under the user’s context, with exploitation requiring user interaction (per ZDI). Affected product/ve...

CVE-2011-2115

IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted tSAC chunk, which triggers a heap-based buffer overflow, a different vulnerability than CVE-2011-2111 and CVE-2011-2116...

CVE-2011-2108

CVE-2011-2108 affects Adobe Shockwave Player prior to version 11.6.0.626. The vulnerability is described as an arbitrary code execution flaw due to a design flaw, with unspecified vectors. The issue is listed across multiple sources (NVD entry for CVE-2011-2108 and vulnerability references in Nes...

CVE-2011-2122

Adobe Shockwave Player (Dirapi.dll) is affected by CVE-2011-2122 before version 11.6.0.626, with memory corruption potentially leading to arbitrary code execution or denial of service via unspecified vectors related to rcsL substructures. This is one of several CVEs tied to Shockwave in the same ...

CVE-2011-2120

Adobe Shockwave Player contains an integer overflow in the CursorAsset x32 component that can lead to remote code execution. Affected are Shockwave Player versions before 11.6.0.626 (and earlier Mac OS X builds cited). Public advisories (APSB11-17) and the ZDI entry confirm this vulnerability cla...

CVE-2011-2125

CVE-2011-2125 is a buffer overflow in Dirapix.dll of Adobe Shockwave Player prior to 11.6.0.626 that allows arbitrary code execution via unspecified vectors. Affected product: Shockwave Player; root cause: Dirapix.dll buffer overflow; impact: arbitrary code execution; remediation: update to 11.6....

CVE-2011-0317

Adobe Shockwave Player contains a vulnerability in Dirapi.dll (CVE-2011-0317) that allows arbitrary code execution or memory corruption. Affected products are Shockwave Player versions before 11.6.0.626 for Mac OS X (and related lines in the CVE list), with exploitation described as via unspecifi...

CVE-2011-2117

Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2124, CVE-2011-2127, and CVE-2011-2128...

CVE-2011-0319

Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0320, CVE-2011-0335, CVE-2011-2119, and CVE-2011-2122...