1551 matches found
ZDI-10-089: Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability
ZDI-10-089: Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-089 May 11, 2010 -- CVE ID: CVE-2010-1292 -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave Player -- TippingPointTM IPS Customer Protection:...
Adobe Shockwave Player Director文件分析RCSL指针覆盖漏洞
CVE ID: CVE-2010-1280. Code Audit Labs http://www.vulnhunt.com 在Adobe’s Shockwave Player软件中 发现一个漏洞，该漏洞允许远程攻击者受害者的机器上任意执行代码。 触发该漏洞需要用户访问一个畸形的web页面。 该漏洞存在于当shockwave player分析Director文件时，错误的使用了文件中的一个变量，导致发生4字节的内存被重写。成功利用该漏洞，攻击者可远程控制受害者机器。 11.5.2.602 ,11.5.6.606 and prior 厂商补丁： adobe ---------...
Adobe Shockwave Player 11.5.6.606 - 'DIR' Multiple Memory Vulnerabilities
/ Title: Adobe Shockwave Player 11.5.6.606 DIR Multiple Memory Vulnerabilities Vendor: Adobe Systems Incorporated Product web page: http://www.adobe.com Summary: Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to some of the best the...
Adobe Patches 'Critical' Shockwave, ColdFusion holes
Adobe joined the Patch Tuesday train today with the release of patches for at least 21 documented security vulnerabilities in the Shockwave and ColdFusion product lines. According to the APSB10-12 security bulletin, 18 of the 21 flaws affected the Shockwave Player, a free software product that le...
PT-2010-2986 · Adobe · Shockwave Player
Name of the Vulnerable Software and Affected Versions: Adobe Shockwave Player versions prior to 11.5.7.609 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption. This is achieved through a crafted .dir file that exploits the...
Adobe Shockwave Invalid Offset Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave. User interaction is required in that a target visit a malicious website. The specific flaw exists within the code responsible for parsing Director files. The vulnerable function is...
Adobe Shockwave Player 0xFFFFFF49 Record Parsing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the code responsible for parsing 3D objec...
Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the code...
Adobe Shockwave Player 11.5.6.606 (DIR) Multiple Memory Vulnerabilities
Summary Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to some of the best the Web has to offer - including dazzling 3D games and entertainment, interactive product demonstrations, and online learning applications. Shockwave Player...
Adobe Shockwave Player 3D Model Buffer Overflow Vulnerabilities
Adobe Shockwave Player is prone to buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Adobe Shockwave Player 3D Model Buffer Overflow Vulnerabilities
This host has Adobe Shockwave Player installed and is prone to Buffer Overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeshockwaveplayerbofvulnjan10.nasl 5263 2017-02-10 13:45:51Z teissa $ Adobe Shockwave Player 3D Model Buffer Overflow Vulnerabilities Authors: Antu Sanadi Copyright...
CVE-2009-4003
Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via 1 an unspecified block type in a Shockwave file, leading to a heap-based buffer overflow; and might allow remote attackers to execute arbitrary code via 2 an unspecified 3D...
CVE-2009-4002
Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file...
Integer overflow
Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via 1 an unspecified block type in a Shockwave file, leading to a heap-based buffer overflow; and might allow remote attackers to execute arbitrary code via 2 an unspecified 3D...
Heap overflow
Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file...
CVE-2009-4002
Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file...
CVE-2009-4003
CVE-2009-4003 concerns multiple integer overflow vulnerabilities in Adobe Shockwave Player prior to 11.5.6.606, reported across several sources. The flaws occur during Shockwave processing (notably in 3D blocks) and can lead to heap memory corruption and potential remote code execution. Affected ...
CVE-2009-4002
Adobe Shockwave Player is affected by CVE-2009-4002 (buffer overflow in 3D model processing) in versions prior to 11.5.6.606. The vulnerability allows remote code execution and is discussed alongside CVE-2009-4003 (integer overflows) in multiple advisories. Affected software: Shockwave Player on ...
CVE-2009-4003
Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via 1 an unspecified block type in a Shockwave file, leading to a heap-based buffer overflow; and might allow remote attackers to execute arbitrary code via 2 an unspecified 3D...