flash-plugin input validation flaw

Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a 1 Long string or 2 XML variable type in a crafted a FLV or b SWF file, related to an "input validation error," including a signed comparison of values...

Macromedia ShockWave ActiveX multiple security vulnerabilities

SwDir.dll multiple methods buffer overflows...

Stack overflow

Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote attackers to cause a denial of service Internet Explorer 7 crash and possibly execute arbitrary code via a long 1 BGCOLOR, 2 SRC, 3 AutoStart, 4 Sound, 5 DrawLogo, or 6...

CVE-2007-1403

The CVE-2007-1403 entry concerns the Macromedia Shockwave SwDir.dll ActiveX control (10.1.4.20) with remote denial of service and potential code execution via stack/buffer overflows in multiple properties (e.g., BGCOLOR, SRC, AutoStart, Sound, DrawLogo, DrawProgress). Connected advisories (CPAI-2...

CVE-2007-1403

Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote attackers to cause a denial of service Internet Explorer 7 crash and possibly execute arbitrary code via a long 1 BGCOLOR, 2 SRC, 3 AutoStart, 4 Sound, 5 DrawLogo, or 6...

Macromedia Shockwave 10 SWDIR.DLL多个ActiveX控件远程拒绝服务漏洞

Macromedia Shockwave是专门播放使用Director Shockwave Studio制作的网页的外挂软件，也可以观看Flash网页。 Shockwave的SWDIR.DLL库中存在多个栈溢出漏洞，如果用户使用安装了Shockwave的浏览器访问恶意站点的话，就可能触发这些溢出，导致浏览器拒绝服务。 Macromedia Shockwave 10.1.4.20 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.macromedia.com/ pre codespan style="font: 10pt...

phpBB 2.0.21 - privmsg.php HTML Injection

phpBB 2.0.21 - privmsg.php HTML Injection source: https://www.securityfocus.com/bid/22001/info phpBB is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and scri...

phpBB (privmsg.php) XSS Exploit

phpBB privmsg.php XSS Exploit By: Demential Web: http://headburn.altervista.org E-mail: [email protected] PhpBB website: http://phpbb.com Exploit tested on phpBB 2.0.21 Secunia.com said: Input passed to the form field "Message body" in privmsg.php is not properly sanitised before it is returned to...

phpBB 2.0.21 - 'privmsg.php' HTML Injection

source: https://www.securityfocus.com/bid/22001/info phpBB is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would execute in the context of th...

Cross site scripting

Cross-site scripting XSS vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a getURL statement in a .swf file, as demonstrated by "Remote Cookie Disclosure." NOTE: it could be argued that this is an issue in Shockwav...

CVE-2007-0083

Cross-site scripting XSS vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a getURL statement in a .swf file, as demonstrated by "Remote Cookie Disclosure." NOTE: it could be argued that this is an issue in Shockwav...

CVE-2006-6885

The CVE describes a vulnerability in Macromedia Shockwave 10 where an ActiveX control in SwDir.dll (SwDir ActiveX) can be abused by sending a long string in the swURL attribute to cause a denial of service (IE7 crash). Affected component: SwDir.dll ActiveX control within Shockwave 10. Root cause:...

Macromedia Shockwave 10 (SwDir.dll) ActiveX控件远程拒绝服务漏洞

Macromedia Shockwave是一款流行的网络多媒体应用程序。 Macromedia Shockwave 10 SwDir.dll存在安全问题，远程攻击者可以利用漏洞使调用Shockwave的Internet explorer崩溃，造成拒绝服务攻击。 由于对Shockwave控件处理存在问题，构建恶意参数传递给Shockwave处理，可使调用Macromedia Shockwave的Internet explorer崩溃。 Macromedia Shockwave 10 目前没有解决方案提供： http://www.macromedia.com/...

CVE-2006-6885

An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long string in the swURL attribute...

Macromedia Shockwave 10 (SwDir.dll) Internet Explorer Denial of Service

No description provided by source. !-- --------------------------------------------------------------------------- Macromedia Shockwave 10 SwDir.dll Internet Explorer Denial of Service author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP...

Macromedia Shockwave 10 SwDir.dll Internet Explorer 7 - Denial of Service

Macromedia Shockwave 10 SwDir.dll Internet Explorer 7 - Denial of Service argCount = 1 arg1=String1000000, "A" ShockW.swURL = arg1 milw0rm.com 2006-12-29...

Macromedia Shockwave 10 (SwDir.dll) Internet Explorer Denial of Service

Exploit for unknown platform in category dos / poc ======================================================================= Macromedia Shockwave 10 SwDir.dll Internet Explorer Denial of Service ======================================================================= argCount = 1 arg1=String1000000,...

Macromedia Shockwave 10 'SwDir.dll' Internet Explorer 7 - Denial of Service

argCount = 1 arg1=String1000000, "A" ShockW.swURL = arg1 milw0rm.com 2006-12-29...

Microsoft Office嵌入Shockwave Flash对象绕过安全限制漏洞（MS06-069）

Microsoft Excel是非常流行的电子表格办公软件。 Microsoft Excel对文件中的对象处理存在漏洞，攻击者可能利用此漏洞在用户机器上执行任意指令。 攻击可以使用Shockwave Flash Object将有Java脚本的恶意Flash文件嵌入到Excel表单中，这样如果用户打开了该文件的话便无需用户交互便自动运行该对象。 Microsoft Excel 2003 Microsoft Office 2003 Microsoft已经为此发布了一个安全公告（MS06-069）以及相应补丁: MS06-069：Vulnerabilities in Macromedia...

Microsoft Excel嵌入Shockwave Flash对象绕过安全限制漏洞

Microsoft Excel是非常流行的电子表格办公软件。 Microsoft Excel对文件中的对象处理存在漏洞，攻击者可能利用此漏洞在用户机器上执行任意指令。 攻击可以使用Shockwave Flash Object将有Java脚本的恶意Flash文件嵌入到Excel表单中，这样如果用户打开了该文件的话便无需用户交互便自动运行该对象。 Microsoft Excel 2003 Microsoft Office 2003 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...