1748 matches found
CVE-2004-1598
Adobe Acrobat and Acrobat Reader 6.0 allow remote attackers to read arbitrary files via a PDF file that contains an embedded Shockwave swf file that references files outside of the temporary directory...
CVE-2002-1382
CVE-2002-1382 affects Macromedia Flash Player prior to 6.0.65.0. The vulnerability allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash (SWF) files; this is noted as a different issue from CAN-2002-0846. The available documents specify the affect...
CVE-2002-1382
Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash file format SWF files, a different issue than CAN-2002-0846...
CVE-2002-1382: Undefined Security Weakness
Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash file format SWF files, a different issue than CAN-2002-0846...
Microsoft Internet Explorer 6.0 Macromedia Flash Player Plugin - Remote Denial of Service
source: https://www.securityfocus.com/bid/10057/info It has been reported that Macromedia Flash Player for Internet Explorer may be prone to a denial of service vulnerability that may cause an instance of Internet Explorer to crash. The issue is reported to exist in the 'LoadMovie' function by...
CVE-2002-0846
The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more data than the specified length...
CVE-2002-0846
CVE-2002-0846 : The vulnerability concerns the decoder for Macromedia Shockwave Flash. A malformed SWF header containing more data than the specified length can enable remote code execution. The issue is described across multiple records (CVE/DV and NVD entries) as impacting the Shockwave Flash/S...
CVE-2002-0846: Undefined Security Weakness
The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more data than the specified length...
CVE-2002-1881
Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service web browser crash via malformed content in a Flash Shockwave .SWF file, as demonstrated by by ROT13 encoding the body of the file but not the headers...
CVE-2002-0846
The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more data than the specified length...
EEYE: Macromedia Shockwave Flash Malformed Header Overflow
Macromedia Shockwave Flash Malformed Header Overflow Release Date: August 8, 2002 Severity: High Remote Code Execution Systems Affected: Macromedia Shockwave Flash - All Versions; Unix and Windows; Netscape and Internet Explorer Description: While working on some pre-release eEye Retina CHAM tool...
Code execution in Macromedia Shockwave Flash
"Save" command may be used to place malware file anywhere on user's computer including Startup folder...
CVE-1999-1526
Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia...
CVE-1999-1526
The CVE-1999-1526 entry concerns Macromedia Shockwave 7’s auto-update feature, which transmits a user’s password and hard disk information back to Macromedia. The document indicates this affects confidentiality (partial impact) with no stated impact to integrity or availability and does not speci...
CVE-1999-1525
Macromedia Shockwave before 6.0 is affected. A malicious webmaster can read a user’s mailbox and potentially access internal web servers via the GetNextText command on a Shockwave movie, as described. The impact is partial confidentiality and possible internal access; exploitation details or reme...
CVE-1999-1525
Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie...
CVE-1999-1525: Undefined Security Weakness
Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie...
CVE-1999-1526: Undefined Security Weakness
Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia...
CVE-2001-0166
Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malformed tag length specifiers in a SWF file...
CVE-2001-0166
CVE-2001-0166 affects the Macromedia Shockwave/Flash plug-in (version 8 and earlier). The vulnerability arises from malformed SWF tag length fields, triggering a buffer overflow on processing the file, which may crash the plug-in and cause a denial of service. CERT reports the issue as a crash (D...