Macromedia Shockwave 10 (SwDir.dll) Internet Explorer Denial of Service

No description provided by source. !-- --------------------------------------------------------------------------- Macromedia Shockwave 10 SwDir.dll Internet Explorer Denial of Service author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP...

Macromedia Shockwave 10 SwDir.dll Internet Explorer 7 - Denial of Service

Macromedia Shockwave 10 SwDir.dll Internet Explorer 7 - Denial of Service argCount = 1 arg1=String1000000, "A" ShockW.swURL = arg1 milw0rm.com 2006-12-29...

Macromedia Shockwave 10 'SwDir.dll' Internet Explorer 7 - Denial of Service

argCount = 1 arg1=String1000000, "A" ShockW.swURL = arg1 milw0rm.com 2006-12-29...

Microsoft Office嵌入Shockwave Flash对象绕过安全限制漏洞（MS06-069）

Microsoft Excel是非常流行的电子表格办公软件。 Microsoft Excel对文件中的对象处理存在漏洞，攻击者可能利用此漏洞在用户机器上执行任意指令。 攻击可以使用Shockwave Flash Object将有Java脚本的恶意Flash文件嵌入到Excel表单中，这样如果用户打开了该文件的话便无需用户交互便自动运行该对象。 Microsoft Excel 2003 Microsoft Office 2003 Microsoft已经为此发布了一个安全公告（MS06-069）以及相应补丁: MS06-069：Vulnerabilities in Macromedia...

Microsoft Excel嵌入Shockwave Flash对象绕过安全限制漏洞

Microsoft Excel是非常流行的电子表格办公软件。 Microsoft Excel对文件中的对象处理存在漏洞，攻击者可能利用此漏洞在用户机器上执行任意指令。 攻击可以使用Shockwave Flash Object将有Java脚本的恶意Flash文件嵌入到Excel表单中，这样如果用户打开了该文件的话便无需用户交互便自动运行该对象。 Microsoft Excel 2003 Microsoft Office 2003 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Shockwave crossite scripting

Crossite access to cookies and document data is possible...

Write-up by Amit Klein: "Forging HTTP request headers with Flash"

Forging HTTP request headers with Flash Amit Klein, July 2006 Flash - Introduction ==================== Flash player is a very popular browser add-on from Adobe actually, Flash was invented by Macromedia, which was acquired by Adobe. This write-up covers mostly Flash 7 and Flash 8, together...

Crtical Shockwave Embeded XSS Execution

The critical bug Shockwave videos allows to embebded code execution... This code can be XSS or activex mechanism. The victim cant understand because it ll executed background of real video without any redirection or url spoofing.. ====================================== Source Code: There is there...

CVE-2006-3014

Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet...

CVE-2006-3014

Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet...

CVE-2006-3014

Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet...

Microsoft Office 2003 - Embedded Shockwave Flash Object Security Bypass

source: https://www.securityfocus.com/bid/18583/info Microsoft Office is prone to a weakness that may allow remote attackers to execute arbitrary script code contained in Shockwave Flash Objects without first requiring confirmation from users. A successful attack may allow attackers to access...

CVE-2006-3014

CVE-2006-3014 affects Microsoft Excel where embedding a Shockwave Flash Player ActiveX Object inside an XLS can automatically execute, enabling user-assisted arbitrary JavaScript execution and redirection when the spreadsheet is opened. According to SUSE and CPAI advisories, the issue originates ...

Microsoft Office 2003 - Embedded Shockwave Flash Object Security Bypass

Microsoft Office 2003 - Embedded Shockwave Flash Object Security Bypass source: https://www.securityfocus.com/bid/18583/info Microsoft Office is prone to a weakness that may allow remote attackers to execute arbitrary script code contained in Shockwave Flash Objects without first requiring...

CVE-2006-3014: Improper Input Validation

Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet...

CVE-2006-1650

Firefox 1.5.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading. NOTE: a followup was...

Design/Logic Flaw

Firefox 1.5.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading. NOTE: a followup was...

CVE-2006-1650

Firefox 1.5.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading. NOTE: a followup was...

CVE-2006-1650

Firefox 1.5.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading. NOTE: a followup was...

CVE-2006-1650: Undefined Security Weakness

Firefox 1.5.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading. NOTE: a followup was...