July 2013 Adobe Security Bulletins, Patches Released

Adobe today released its monthly round of security updates with patches available for Flash Player, Shockwave and ColdFusion. None of the vulnerabilities are being exploited in the wild, according to Adobe. The flaws in Flash Player and Shockwave could allow hackers to remotely install and run...

KLA10255 Multiple ACE vulnerabilities in Adobe Shockwave Player

Multiple unspecified vulnerabilities were found in Shockwave player. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. These vulnerabilities can be exploited remotely at unspecified vectors. Original advisories - Related products...

Adobe Shockwave Player Multiple Vulnerabilities -01 April 13 (Windows)

This host is installed with Adobe Shockwave player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeshockwaveplayermultvuln01apr13win.nasl 6115 2017-05-12 09:03:25Z teissa $ Adobe Shockwave Player Multiple Vulnerabilities -01 April 13 Windows Authors: Arun Kallavi...

Adobe Shockwave Player Multiple Vulnerabilities -01 April 13 (Mac OS X)

This host is installed with Adobe Shockwave player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeshockwaveplayermultvuln01apr13macosx.nasl 6086 2017-05-09 09:03:30Z teissa $ Adobe Shockwave Player Multiple Vulnerabilities -01 April 13 Mac OS X Authors: Arun...

Adobe Shockwave Player Multiple Vulnerabilities -01 (Apr 2013) - Mac OS X

Adobe Shockwave player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-1383

Buffer overflow in Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code via unspecified vectors...

CVE-2013-1386

Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-1384...

CVE-2013-1385

Adobe Shockwave Player before 12.0.2.122 does not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors...

CVE-2013-1384

Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-1386...

Design/Logic Flaw

Adobe Shockwave Player before 12.0.2.122 does not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors...

Memory corruption

Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-1384...

Buffer overflow

Buffer overflow in Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code via unspecified vectors...

Memory corruption

Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-1386...

CVE-2013-1385

Adobe Shockwave Player before 12.0.2.122 does not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors...

CVE-2013-1386

Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-1384...

CVE-2013-1383

Adobe Shockwave Player is affected by CVE-2013-1383: a buffer overflow in versions before 12.0.2.122 that can lead to arbitrary code execution. Root cause is a buffer overflow in the Shockwave Player component. The vulnerability is discussed across multiple sources (Red Hat advisory, Nessus/OpenV...

CVE-2013-1386

CVE-2013-1386 affects Adobe Shockwave Player prior to version 12.0.2.122. The Red Hat advisories and vulnerability listings describe an arbitrary code execution or memory corruption vulnerability via unspecified vectors (distinct from CVE-2013-1384). Affected component: Shockwave Player; impact: ...

CVE-2013-1385

CVE-2013-1385 affects Adobe Shockwave Player prior to 12.0.2.122. The vulnerability allows access to address information that can be used to bypass ASLR, via unspecified vectors. Affected product is Adobe Shockwave Player; root cause is failure to prevent leakage of address information, enabling ...

CVE-2013-1384

Adobe Shockwave Player versions before 12.0.2.122 are affected by CVE-2013-1384 and CVE-2013-1386 (and related advisories). The Red Hat entries corroborate that these flaws allow arbitrary code execution or memory corruption/DoS via unspecified vectors, with the CVEs distinguished from each other...

CVE-2013-1384

Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-1386...