CVE-2009-3464

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3465. NOTE: some of these details are obtained from third party information...

CVE-2009-3463

Array index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site. NOTE: some of these details are obtained from third party information...

CVE-2009-3465

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3464. NOTE: some of these details are obtained from third party information...

CVE-2009-3466

CVE-2009-3466 affects Adobe Shockwave Player and is described as a memory corruption issue related to an invalid string length, allowing remote code execution via a crafted web page. Affected versions are before 11.5.2.602. The vulnerability is fixed by upgrading to Shockwave Player 11.5.2.602. O...

Adobe Shockwave 11.5.1.601 Player Multiple Code Execution Vulnerability

Exploit for unknown platform in category remote exploits ======================================================================= Adobe Shockwave 11.5.1.601 Player Multiple Code Execution Vulnerability ======================================================================= Title: Adobe Shockwave...

Shockwave Player <= 11.5.1.601 Multiple Vulnerabilities (APSB09-16)

The remote Windows host contains a version of Adobe's Shockwave Player that is 11.5.1.601 or earlier. As such, it is affected by multiple issues : - An invalid index vulnerability could lead to code execution. CVE-2009-3463 - Invalid pointer vulnerabilities could lead to code execution...

CVE-2009-3465: Improper Control of Generation of Code

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3464. NOTE: some of these details are obtained from third party information...

CVE-2009-3464: Improper Control of Generation of Code

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3465. NOTE: some of these details are obtained from third party information...

Adobe Shockwave Player 11.5.1.601 - Multiple Code Executions

Adobe Shockwave Player 11.5.1.601 - Multiple Code Executions argCount = 1 arg1=String2097152, "A" ShockW.PlayerVersion = arg1...

Adobe Shockwave 11.5.1.601 Player Multiple Code Execution Vulnerability

No description provided by source. html object classid='clsid:233C1507-6A77-46A4-9443-F871F945D258' id='ShockW'/object script language='vbscript' argCount = 1 arg1=String2097152, "A" ShockW.PlayerVersion = arg1 /script...

Adobe Shockwave Player 11.5.1.601 - Multiple Code Executions

argCount = 1 arg1=String2097152, "A" ShockW.PlayerVersion = arg1...

CVE-2009-3463: Improper Restriction of Operations within the Bounds of a Memory Buffer

Array index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site. NOTE: some of these details are obtained from third party information...

CVE-2009-3466: Undefined Security Weakness

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an "invalid string length vulnerability." NOTE: some of these details are obtained from third party information...

Adobe Patches Critical Shockwave Player Flaws

Adobe today released a patch to fix several serious security flaws in its Shockwave Player software. The update, which is rated “critical,” addresses a total of five documented vulnerabilities. The most serious flaw could allow remote code execution attacks against Windows and Mac users. From...

Adobe ShockWave Player 11.5.1.601 Stack Overflow

Application: Adobe ShockWave Player 11.5.1.601 Platforms: Windows XP Professional French SP2 and SP3 crash: IE 6.0.2900.2180 Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details and bug 3 The Code =============== 1...

Adobe Shockwave Player ActiveX Control BOF Vulnerability

This host has Adobe Shockwave Player ActiveX Control installed and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodadobeshockwaveplayerbofvuln.nasl 6530 2017-07-05 06:23:50Z cfischer $ Adobe Shockwave Player ActiveX Control BOF Vulnerability Authors: Nikita MR...

Adobe Shockwave Player ActiveX Control BOF Vulnerability

Adobe Shockwave Player ActiveX Control is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Adobe ShockWave Player SwDir.dll控件堆溢出漏洞

CVE ID: CVE-2009-3244 Adobe Shockwave Player是专门播放使用Director Shockwave Studio制作的网页的外挂软件。 Shockwave Player所提供的SwDir.dll ActiveX控件在播放恶意网页文件时存在堆溢出漏洞，用户受骗打开了包含有超长PlayerVersion属性值的HTML文件时就可能触发这个溢出，导致拒绝服务或执行任意代码。 Adobe Shockwave Player 11.5.1.601 临时解决方法： 为CLSID...

Heap overflow

Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PlayerVersion property value...

CVE-2009-3244

CVE-2009-3244 is a heap-based buffer overflow in the SwDir.dll ActiveX control of Adobe Shockwave Player (11.5.1.601 and earlier). The overflow is triggered by a long PlayerVersion property, allowing a remote attacker to cause a denial of service and possibly execute arbitrary code. Affected plat...