Secunia Research: Adobe Shockwave Player 3D Model Buffer Overflow

====================================================================== Secunia Research 20/01/2010 - Adobe Shockwave Player 3D Model Buffer Overflow - ====================================================================== Table of Contents Affected...

Critical Flaws Haunt Adobe Shockwave Player

Adobe’s run on the patching treadmill continued this week with a “critical” update to fix a pair of code execution holes in its Shockwave Player. The vulnerabilities affect Adobe Shockwave Player 11.5.2.602 and earlier versions, on the Windows and Mac operating systems. According to an Adobe...

Secunia Research: Adobe Shockwave Player Integer Overflow Vulnerability

====================================================================== Secunia Research 20/01/2010 - Adobe Shockwave Player Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Adobe Releases Shockwave Player Update

Adobe has released an update for Shockwave Player to address multiple vulnerabilities. These vulnerabilities affect Adobe Shockwave Player 11.5.2.602 and earlier versions for Windows and Macintosh. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code. US-CERT...

Shockwave Player < 11.5.6.606 Multiple Vulnerabilities (APSB10-03)

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.6.606. As such, it is potentially affected by multiple issues : - A buffer overflow vulnerability that could potentially lead to code execution. CVE-2009-4002 - Multiple integer overflow vulnerabiliti...

Internet Explorer 6/7/8 DOS Vulnerability (Shockwave Flash Object)

No description provided by source. Version: 6/7/8 Tested on: Windows XP SP3 English & Windows 7 CVE : Code: http://www.exploit-db.com/sploits/iecrash.tar.gz http://sebug.net/paper/Exploits-Archives/2010-exploits/1001-exploits/iecrash.tar.gz Description: Modified 1360. byte to 44, 1361. to 43, 136...

Microsoft Internet Explorer 678 - Shockwave Flash Object Denial of Service

Microsoft Internet Explorer 678 - Shockwave Flash Object Denial of Service Version: 6/7/8 Tested on: Windows XP SP3 English & Windows 7 CVE : Code: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/11182.tar.gz iecrash.tar.gz Description: Modified 1360. byte to 44...

MS Internet Explorer 6/7/8 DOS Vulnerability (Shockwave Flash Object)

Exploit for unknown platform in category dos / poc ===================================================================== MS Internet Explorer 6/7/8 DOS Vulnerability Shockwave Flash Object ===================================================================== Version: 6/7/8 Tested on: Windows XP S...

Microsoft Internet Explorer 6/7/8 - Shockwave Flash Object Denial of Service

Version: 6/7/8 Tested on: Windows XP SP3 English & Windows 7 CVE : Code: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11182.tar.gz iecrash.tar.gz Description: Modified 1360. byte to 44, 1361. to 43, 1362. 42, 1363. byte to 41 of a sample swf file, ran it and...

Adobe Shockwave

Allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an “invalid string length vulnerability.” Array index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave...

Adobe Flash Player

Does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a “buffer overflow issue.” Allows attackers to cause a denial of service application crash or possibly execute...

Adobe Shockwave Player < 11.5.2.602 Multiple RCE Vulnerabilities

Adobe Shockwave Player is prone to multiple RCE vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Shockwave Player Multiple security vulnerabilities

Multiple vulnerabilities lead to code executions...

Adobe Shockwave Player Multiple Code Execution Vulnerabilities

No description provided by source. VUPEN Vulnerability Research - Adobe Shockwave Player Multiple Code Execution Vulnerabilities I. BACKGROUND --------------------- "Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to some of the best...

Security updates available for Shockwave Player

Security updates available for Shockwave Player Release date: November 3, 2009 Vulnerability identifier: APSB09-16 CVE number: CVE-2009-3244, CVE-2009-3463, CVE-2009-3464, CVE-2009-3465, CVE-2009-3466 Platform: Windows and Macintosh Summary Critical vulnerabilities have been identified in Adobe...

VUPEN Security - Adobe Shockwave Player Multiple Code Execution Vulnerabilities

VUPEN Vulnerability Research - Adobe Shockwave Player Multiple Code Execution Vulnerabilities I. BACKGROUND --------------------- "Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to some of the best the Web has to offer including...

Design/Logic Flaw

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3464. NOTE: some of these details are obtained from third party information...

CVE-2009-3465

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3464. NOTE: some of these details are obtained from third party information...

CVE-2009-3466

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an "invalid string length vulnerability." NOTE: some of these details are obtained from third party information...

Design/Logic Flaw

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3465. NOTE: some of these details are obtained from third party information...