CVE-2015-6680

Adobe Shockwave Player is vulnerable to a memory corruption flaw that can allow arbitrary code execution or a denial of service. The issue affects versions prior to 12.2.0.162; upgrading to 12.2.0.162 or later is the stated remedy across multiple sources (CNVD/NVD and related advisories). The vul...

CVE-2015-6681

CVE-2015-6681 affects Adobe Shockwave Player before version 12.2.0.162. The vulnerability enables memory corruption that could allow an attacker to execute arbitrary code or cause a denial of service via unspecified vectors. The OpenVAS entry for Adobe Shockwave indicates this is a Windows-relate...

CVE-2015-6681

Adobe Shockwave Player before 12.2.0.162 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-6680...

Adobe Shockwave Player <= 12.1.9.160 Multiple RCE (APSB15-22) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is prior or equal to 12.1.9.160. It is, therefore, affected by multiple remote code execution vulnerabilities due improper validation of user-supplied input. A remote attacker can exploit these vulnerabilities to corrupt...

CVE-2015-6680

Adobe Shockwave Player before 12.2.0.162 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-6681...

Adobe Shockwave Player <= 12.1.9.160 Multiple RCE (APSB15-22)

The remote Windows host contains a version of Adobe Shockwave Player that is prior or equal to 12.1.9.160. It is, therefore, affected by multiple remote code execution vulnerabilities due improper validation of user-supplied input. A remote attacker can exploit these vulnerabilities to corrupt...

September 2015 Adobe Shockwave Security Patch

Adobe today released a new version of its Shockwave Player that patches two critical vulnerabilities that could be remotely exploited. Adobe said that it is not aware of public exploits for either security flaw. The vulnerability affects Shockwave for Windows, versions 12.1.9.160 and earlier and...

APSB15-22 Security update available for Adobe Shockwave Player

Adobe has released a security update for Adobe Shockwave Player. This update addresses critical vulnerabilities that could potentially allow an attacker to take control of the affected system...

Adobe Releases Security Update for Shockwave Player

Adobe has released a security update to address vulnerabilities in Shockwave Player. Exploitation of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review Adobe Security Bulletin APSB15-22 and apply the necessary...

KLA10663 Code execution vulnerability in Adobe Shockwave Player

An unspecified vulnerabilities were found in Adobe Shockwave Player. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via an unknown vectors. Original advisories Adobe Advisory Related products Adobe-Shockwave-Player C...

Internet Bug Bounty: Wrong Handling of Content-Type allows Flash injection and Rosseta flash patch bypass

Hey, I spent some time reversing the mitigation of Rosetta Flash. This research helped me to discover a very interesting bug: Adobe Flash player uses "string searching" similar to indexOf over the entire response's "Content-Type" header value to match the "application/x-shockwave-flash" string...

The vulnerability of the Shockwave Player software allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the Shockwave Player software is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the Shockwave Player software allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the Shockwave Player software is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

Adobe Shockwave Player security vulnerabilities

Memory corruptions...

Adobe Shockwave Player Memory Corruption Vulnerability (CNVD-2015-04611)

Adobe Shockwave Player is the United States of America Ordoby Adobe company a multimedia player products, it can be Adobe Director a multimedia production software produced by the application released to the Internet, the installation of the Shockwave plug-in browser can be viewed. A security...

Adobe Shockwave Player Memory Corruption Vulnerability (CNVD-2015-04612)

Adobe Shockwave Player is the United States of America Ordoby Adobe company a multimedia player products, it can be Adobe Director a multimedia production software produced by the application released to the Internet, the installation of the Shockwave plug-in browser can be viewed. A security...

Adobe Shockwave Player Multiple Vulnerabilities -01 (Jul 2015) - Mac OS X

Adobe Shockwave Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Shockwave Player Multiple Vulnerabilities -01 (Jul 2015) - Windows

Adobe Shockwave Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Shockwave Player <= 12.1.8.158 Multiple RCE Vulnerabilities (APSB15-17) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is prior to or equal to 12.1.8.158. It is, therefore, affected by multiple remote code execution vulnerabilities : - An unspecified memory corruption issue exists due to improper validation of user-supplied input. An...

Adobe Shockwave Player <= 12.1.8.158 Multiple RCE Vulnerabilities (APSB15-17)

The remote Windows host contains a version of Adobe Shockwave Player that is prior to or equal to 12.1.8.158. It is, therefore, affected by multiple remote code execution vulnerabilities : - An unspecified memory corruption issue exists due to improper validation of user-supplied input. An attack...