CVE-2010-2879

Adobe Shockwave Player contains a CVE-2010-2879 vulnerability: an integer overflow in the TextXtra.x32 allocator can cause heap memory corruption, enabling remote code execution or a denial of service. Affected product/version: Shockwave Player before 11.5.8.612. Root cause: faulty heap allocatio...

CVE-2010-2878

DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly validate a value associated with a buffer seek for a Director movie, which allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted movie...

CVE-2010-2876

CVE-2010-2876 concerns Adobe Shockwave Player. The vulnerability lies in parsing a FFFFFF88 record in Director (.dir/.dcr) files, where values used to compute a heap buffer size are overflowed, leading to heap memory corruption and potential remote code execution. Affected product: Shockwave Play...

CVE-2010-2878

Adobe Shockwave Player contains a DIRAPIX.dll flaw (CVE-2010-2878) where improper handling of a Director movie buffer seek leads to heap memory corruption, enabling remote code execution or crash. Affected product: Shockwave Player before 11.5.8.612. Attack requires a crafted movie; vendor adviso...

CVE-2010-2877

Adobe Shockwave Player is affected by CVE-2010-2877 (and related CVEs) where a Director movie count value is not properly validated, enabling heap memory corruption and potential code execution. Affected component paths include IML32X.dll and DIRAPIX.dll, with the vulnerability enabling remote co...

CVE-2010-2879

Multiple integer overflows in the allocator in the TextXtra.x32 module in Adobe Shockwave Player before 11.5.8.612 allow remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted 1 element count or 2 element size value in a file...

CVE-2010-2876

Adobe Shockwave Player before 11.5.8.612 does not properly validate values associated with buffer-size calculation for a 0xFFFFFFF8 record in a 1 .dir or 2 .dcr Director movie, which allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafte...

CVE-2010-2877

Adobe Shockwave Player before 11.5.8.612 does not properly validate a count value in a Director movie, which allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted movie, related to IML32X.dll and DIRAPIX.dll...

CVE-2010-2873

Adobe Shockwave Player before 11.5.8.612 does not properly validate offset values in the rcsL RIFF chunks of 1 .DIR and 2 .DCR Director movies, which allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted movie...

CVE-2010-2882

DIRAPI.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x3812 of a...

CVE-2010-2870

Adobe Shockwave Player (DIRAPIX.dll) up to version 11.5.8.612 is vulnerable due to improper validation of a chunk size in the mmap chunk of Director movies, enabling remote code execution or heap memory corruption. The flaw resides in the RIFF-based Director file format parsing within the DIRAPIX...

CVE-2010-2865

Adobe Shockwave Player prior to 11.5.8.612 is affected by CVE-2010-2865, a denial-of-service vulnerability reported in APSB10-20. The issue is described as an unspecified DoS via unknown vectors, with the macro summary indicating memory-related issues across Shockwave components. The advisory not...

CVE-2010-2873

Adobe Shockwave Player is affected by CVE-2010-2873 and related CVEs due to improper validation of offset values in rcsL RIFF chunks within Director files (.DIR/.DCR). This leads to heap memory corruption and can allow remote code execution or a denial of service when a crafted movie is processed...

CVE-2010-2880

Adobe Shockwave Player is affected by CVE-2010-2880 where DIRAPI.dll fails to parse .dir files, enabling memory corruption that can cause a denial of service or allow arbitrary code execution via a malformed file with an invalid value. Affected version: Shockwave Player before 11.5.8.612. The ava...

CVE-2010-2871

Integer overflow in the 3D object functionality in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted size value in a 0xFFFFFF45 RIFF record in a Director movie...

CVE-2010-2868

IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x320D...

CVE-2010-2863

Adobe Shockwave Player before 11.5.8.612 allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors...

CVE-2010-2866

CVE-2010-2866 is an Adobe Shockwave Player vulnerability caused by an integer signedness error in the DIRAPI module during parsing of tSAC chunks in Director movies. The flaw can allow remote code execution or memory corruption leading to a denial of service, if a negative/large count value is pr...

CVE-2010-2867

DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly handle a certain return value associated with the rcsL chunk in a Director movie, which allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted movie, related to a...

CVE-2010-2870

DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly validate a certain chunk size in the mmap chunk in a Director movie, which allows remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted movie...