CVE-2010-0127

Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted FFFFFF45h Shockwave 3D blocks in a Shockwave file...

CVE-2010-1292

CVE-2010-1292 affects Adobe Shockwave Player prior to 11.5.7.609. The vulnerability arises in the pami RIFF chunk parsing, where a value from a file is not validated before being used in file-pointer calculations, enabling a remote attacker to execute arbitrary code or cause memory corruption via...

CVE-2010-0986

Adobe Shockwave Player is affected by CVE-2010-0986 (asset entry processing issue) leading to memory corruption and possible arbitrary code execution. The vulnerability affects Shockwave Player prior to version 11.5.7.609. Secunia’s advisory notes remediation to update to 11.5.7.609. Other source...

CVE-2010-1281

CVE-2010-1281 affects Adobe Shockwave Player (pre-11.5.7.609). The vulnerability is in iml32.dll where a value read from a file used in Director file-pointer calculations is not validated, enabling remote code execution or memory corruption via a crafted .dir file. Exploitation requires user inte...

CVE-2010-0129

Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted .dir aka Director file that triggers an array index error...

CVE-2010-1282

Adobe Shockwave Player (Windows/macOS; prior to 11.5.7.609) is vulnerable due to parsing a specially crafted Director (.dir) file; a crafted ATOM size can trigger an infinite loop and high CPU usage, causing remote denial of service. Multiple connected sources corroborate CVE-2010-1282 and relate...

CVE-2010-0129

Adobe Shockwave Player is affected by CVE-2010-0129 due to multiple integer overflows leading to memory corruption via specially crafted Director (.dir) files. The vulnerability affects Shockwave Player prior to 11.5.7.609 and can enable remote memory corruption or potential arbitrary code execut...

CVE-2010-1292

The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafte...

CVE-2010-1280

Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted .dir aka Director file, related to 1 an erroneous dereference and 2 a certain Shock.dir file...

CVE-2010-1283

Adobe Shockwave Player before 11.5.7.609 is affected by CVE-2010-1283 due to a memory corruption flaw while parsing 3D blocks in Director (.dir) files (0xFFFFFF49). Exploitation could allow remote code execution or cause a denial of service. Affected product: Adobe Shockwave Player. Remediation: ...

CVE-2010-0986

Adobe Shockwave Player before 11.5.7.609 does not properly process asset entries, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted Shockwave file...

VUPEN Security Research - Adobe Shockwave 3D Blocks Field Code Execution Vulnerability (CVE-2010-1283)

VUPEN Security Research - Adobe Shockwave 0xFFFFFF49 3D Block Code Execution Vulnerability CVE-2010-1283 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to...

PT-2010-1946 · Adobe · Shockwave Player

Name of the Vulnerable Software and Affected Versions: Adobe Shockwave Player versions prior to 11.5.7.609 Description: The issue is related to an integer overflow that might allow remote attackers to execute arbitrary code via a crafted .dir aka Director file. Recommendations: For versions prior...

Secunia Research: Adobe Shockwave Player Font Processing Buffer Overflow

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player Font Processing Buffer Overflow - ====================================================================== Table of Contents Affected...

VUPEN Security Research - Adobe Shockwave IML32 Multiple Code Execution Vulnerabilities (CVE-2010-0129)

VUPEN Security Research - Adobe Shockwave IML32 Multiple Code Execution Vulnerabilities CVE-2010-0129 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to so...

Secunia Research: Adobe Shockwave Player Asset Entry Parsing Vulnerability

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player Asset Entry Parsing Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Adobe Shockwave Player Integer Overflow Vulnerability

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Adobe Shockwave Player Signedness Error Vulnerability

====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player Signedness Error Vulnerability - ====================================================================== Table of Contents Affected...

VUPEN Security Research - Adobe Shockwave DIRAPI Multiple Code Execution Vulnerabilities (CVE-2010-1280)

VUPEN Security Research - Adobe Shockwave DIRAPI Multiple Code Execution Vulnerabilities CVE-2010-1280 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to...

PT-2010-2985 · Adobe · Shockwave Player

Name of the Vulnerable Software and Affected Versions: Adobe Shockwave Player versions prior to 11.5.7.609 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted .dir file. This is related to an erroneous...