CVE-2012-6270

CVE-2012-6270 concerns Adobe Shockwave Player up to version 11.6.8.638. A crafted HTML document referencing Shockwave content with a specific compatibility parameter can trigger installation of the Shockwave 10.4.0.025 compatibility feature, enabling a “downgrading” scenario. Publicly available s...

CVE-2019-7099

Summary: CVE-2019-7099 affects Adobe Shockwave Player. The vulnerability is a memory corruption issue in Shockwave Player versions 12.3.4.204 and earlier, with potential for arbitrary code execution if exploited. Public sources in the connected set confirm the affected product and version range a...

CVE-2010-2872

Adobe Shockwave Player (Windows/macOS) prior to 11.5.8.612 is affected by CVE-2010-2872, a memory-corruption vulnerability in the Director pami RIFF chunk offset parsing that can lead to remote code execution or a denial of service when a crafted DIR/movie is opened. Root cause: improper validati...

CVE-2011-0335

CVE-2011-0335 affects Adobe Shockwave Player and is tied to Dirapi.dll. The initial description states that before version 11.6.0.626, users could trigger arbitrary code execution or memory corruption via unspecified vectors, with possible DoS. Connected sources corroborate multiple CVEs in the s...

CVE-2009-3463

CVE-2009-3463 affects Adobe Shockwave Player prior to 11.5.2.602, with an array index error that could allow remote code execution via crafted Shockwave content on a web site. The issue is part of APSB09-16 and is accompanied by related CVEs (3464–3466). The documented impact is arbitrary code ex...

CVE-2009-3464

CVE-2009-3464 affects Adobe Shockwave Player prior to 11.5.2.602. The vulnerability is described as an invalid pointer vulnerability in the processing of crafted Shockwave content, which could allow remote code execution. Some sources group this with multiple related issues under APSB09-16. The d...

CVE-2010-1291

Technical details for CVE-2010-1291 are not publicly provided in the supplied documents; the Connected documents do not specify affected software versions, root cause, or remediation. Monitor for updates.

CVE-2010-4093

Adobe Shockwave Player before 11.5.9.620 is vulnerable to remote code execution and memory corruption (CVE-2010-4093 among others) due to an integer overflow/heap memory handling issue when parsing certain records (e.g., FFFFFF88). Publicly documented advisories (APSB11-01) describe a specific ov...

CVE-2014-0501

Adobe Shockwave Player before 12.0.9.149 is affected by CVE-2014-0501 (distinct from CVE-2014-0500) and can allow remote code execution or memory corruption via unspecified vectors. The vulnerability affects Shockwave Player on Windows and macOS; Adobe issued APSB14-06 to address these issues (up...

CVE-2010-2863

Adobe Shockwave Player before 11.5.8.612 is affected by memory corruption vulnerabilities (e.g., CVE-2010-2863) that could allow denial of service or arbitrary code execution via unspecified vectors. Affected versions include 11.5.7.609 and earlier on Windows/Mac, with multiple related CVEs (e.g....

CVE-2010-2870

Adobe Shockwave Player (DIRAPIX.dll) up to version 11.5.8.612 is vulnerable due to improper validation of a chunk size in the mmap chunk of Director movies, enabling remote code execution or heap memory corruption. The flaw resides in the RIFF-based Director file format parsing within the DIRAPIX...

CVE-2010-4191

Adobe Shockwave Player is affected by multiple remote code execution and memory corruption vulnerabilities (CVE-2010-2587/2588/2589, 2010-4092/4093/4187/4190/4191/4192/4306/4194/4195/4196, 2011-0555/0556/0557/0569, among others) tied to the dirapi.dll and related components. The consolidated advi...

CVE-2012-0761

Adobe Shockwave Player before 11.6.4.634 is affected by a vulnerability in the Shockwave 3D Asset component (CVE-2012-0761) that can lead to arbitrary code execution or a denial of service due to memory corruption via unspecified vectors. The Red Hat advisories reference the same family of vulner...

CVE-2010-0987

Adobe Shockwave Player contains a heap-based buffer overflow (CVE-2010-0987) exploitable via crafted embedded fonts in Shockwave files. Affected product: Shockwave Player before version 11.5.7.609. Connected sources corroborate the vulnerability as part of multiple font-related shocks and describ...

CVE-2010-1288

CVE-2010-1288 is a buffer overflow in Adobe Shockwave Player prior to version 11.5.7.609 that could allow arbitrary code execution via unspecified vectors. The vulnerability is part of a set of issues targeted by Adobe APSB10-12, affecting Shockwave Player 11.5.6.606 and earlier on Windows and ma...

CVE-2010-2588

Adobe Shockwave Player

CVE-2010-4087

Adobe Shockwave Player (IML32.dll) is affected by CVE-2010-4087: memory corruption via a crafted .dir mmap record with an invalid VSWV entry length, leading to possible arbitrary code execution or denial of service. This vulnerability is described as existing in Shockwave Player before version 11...

CVE-2010-4090

Summary of CVE-2010-4090: Adobe Shockwave Player prior to version 11.5.9.615 is vulnerable to memory corruption that can lead to arbitrary code execution or denial of service via unspecified vectors. The affected component is the Shockwave Player plugin; vulnerability details consistently refer t...

CVE-2010-4190

Adobe Shockwave Player (pre-11.5.9.620) is affected by CVE-2010-4190 through malformed CSWV RIFF chunks that miscalculate an offset for a substructure, causing an out-of-bounds heap memory seek and potential arbitrary code execution or memory corruption. Root cause: incorrect offset calculation d...

CVE-2010-4195

Adobe Shockwave Player TextXtra.x32 DEMUX parsing path (TextXtra module) before 11.5.9.620 contains an input validation flaw that can lead to remote arbitrary code execution when processing unspecified input data. Details indicate multiple CVEs (including CVE-2010-4195) under APSB11-01; exact vec...

CVE-2011-0319

Adobe Shockwave Player is affected by CVE-2011-0319 (Dirapi.dll) with memory corruption/arbitrary code execution. Affected version: Shockwave Player ≤ 11.5.9.620 (Mac OS X); vulnerable component is Dirapi.dll. Root cause: memory corruption/other unspecified vectors leading to code execution. Impa...

CVE-2012-0760

The CVE-2012-0760 entry concerns Adobe Shockwave Player’s Shockwave 3D Asset component, affected in versions prior to 11.6.4.634. The vulnerability allows arbitrary code execution or a denial of service due to memory corruption via unspecified vectors, as part of a family of Shockwave issues (sha...

CVE-2012-0766

Adobe Shockwave Player prior to 11.6.4.634 is affected by a vulnerability in the Shockwave 3D Asset component leading to arbitrary code execution or memory corruption. The issue is described across CVE-2012-0766 and related entries (CVE-2012-0757, 0760, 0761, 0762, 0763, 0764); Red Hat advisories...

CVE-2012-2032

Adobe Shockwave Player is affected by multiple memory-corruption/remote code-execution vulnerabilities tracked as CVE-2012-2030 to CVE-2012-2033. The connected advisories attribute the issue to a parsing error in the DIR/DCR RIFF-like data within Shockwave files (rcsL chunk), which can be trigger...

CVE-2007-5941

The CVE-2007-5941 issue is a stack-based buffer overflow in the SWCtl.SWCtl ActiveX control of Adobe Shockwave. The vulnerability allows remote attackers to cause a denial of service and potentially execute arbitrary code via a long argument to the ShockwaveVersion method. Connected documents con...

CVE-2010-1287

Adobe Shockwave Player for Windows/macOS prior to 11.5.7.609 is affected by multiple memory corruption vulnerabilities, including CVE-2010-1287, that can cause denial of service or potentially allow arbitrary code execution via unspecified vectors. The vulnerability family is evidenced by multipl...

CVE-2010-2866

CVE-2010-2866 is an Adobe Shockwave Player vulnerability caused by an integer signedness error in the DIRAPI module during parsing of tSAC chunks in Director movies. The flaw can allow remote code execution or memory corruption leading to a denial of service, if a negative/large count value is pr...

CVE-2010-2876

CVE-2010-2876 concerns Adobe Shockwave Player. The vulnerability lies in parsing a FFFFFF88 record in Director (.dir/.dcr) files, where values used to compute a heap buffer size are overflowed, leading to heap memory corruption and potential remote code execution. Affected product: Shockwave Play...

CVE-2010-4085

CVE-2010-4085 affects Adobe Shockwave Player (dirapi.dll) prior to version 11.5.9.615. The vulnerability is a memory corruption issue that can lead to arbitrary code execution or a denial of service via unspecified vectors. Affected software: Adobe Shockwave Player (Windows/macOS) with the vulner...

CVE-2010-4088

CVE-2010-4088 affects Adobe Shockwave Player prior to 11.5.9.615, via the DIRAPI.dll path where parsing a .dir media file with duplicated KEY* references can cause memory corruption, enabling code execution or a crash. Affected component: Shockwave Player (DIRAPI.dll); vulnerable condition: malfo...

CVE-2010-4089

CVE-2010-4089 affects Adobe Shockwave Player, where IML32.dll can memory-corrupt via a crafted .dir file containing duplicated LCSM entries in an mmap record. This enables arbitrary code execution or a denial of service. Affected versions are Shockwave Player prior to 11.5.9.615. Remediation: upg...

CVE-2011-2117

Adobe Shockwave Player (pre-11.6.0.626) is affected by multiple memory corruption/unspecified-vulnerability defects that can lead to arbitrary code execution or memory corruption, including CVEs such as 2011-2117. The issues affect multiple components (e.g., Dirapi.dll, IML32.dll, Shockwave3DAsse...

CVE-2011-2446

CVE-2011-2446 affects Adobe Shockwave Player’s DIRAPI.dll (before 11.6.3.633). The issue is a memory corruption/arbitrary code execution vulnerability via unspecified vectors in the Shockwave Player, as part of the Nov 2011 set of vulnerabilities (APSB11-27). Connected sources corroborate multipl...

CVE-2012-2043

CVE-2012-2043 affects Adobe Shockwave Player prior to 11.6.6.636. The flaw allows attackers to execute arbitrary code or cause a memory corruption-based denial of service via unspecified vectors, as part of a set of CVEs (2043–2047). The cited NVD entry lists a base score of 10.0 (HIGH) with netw...

CVE-2013-5333

Affected product: Adobe Shockwave Player prior to 12.0.7.148. The vulnerability (CVE-2013-5333) is a memory corruption issue that can allow remote code execution or a denial of service via unspecified vectors. The issue is fixed in patched versions released with APSB13-29 (Adobe Security Update f...

CVE-2010-0130

CVE-2010-0130 is an Adobe Shockwave Player integer overflow vulnerability disclosed for vulnerability in Shockwave Player prior to 11.5.7.609. The issue arises when processing Director (.dir) files, enabling remote code execution. Affected software: Adobe Shockwave Player (versions before 11.5.7....

CVE-2010-1283

Adobe Shockwave Player before 11.5.7.609 is affected by CVE-2010-1283 due to a memory corruption flaw while parsing 3D blocks in Director (.dir) files (0xFFFFFF49). Exploitation could allow remote code execution or cause a denial of service. Affected product: Adobe Shockwave Player. Remediation: ...

CVE-2010-2589

CVE-2010-2589 : Integer overflow in the dirapi.dll of Adobe Shockwave Player (pre-11.5.9.620) can lead to arbitrary code execution. Affected versions include 11.5.9.615 and earlier. Remediation: upgrade to 11.5.9.620 per APSB11-01. "

CVE-2012-0762

CVE-2012-0762 affects the Shockwave 3D Asset component in Adobe Shockwave Player; prior to version 11.6.4.634, it allows attackers to execute arbitrary code or cause memory corruption/DoS via unspecified vectors. This is documented in Red Hat CVEs list as part of a family to CVE-2012-0757/0760/07...

CVE-2012-2045

CVE-2012-2045 affects Adobe Shockwave Player prior to 11.6.6.636 . The vulnerability is described as memory corruption that allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors. The provided connected documents do not specify the exact root cause details...

CVE-2012-4173

Adobe Shockwave Player before 11.6.8.638 is vulnerable to a buffer overflow that allows arbitrary code execution via unspecified vectors (CVE-2012-4172, CVE-2012-4173, CVE-2012-4174, CVE-2012-4175, CVE-2012-5273). Affected product: Shockwave Player (Windows/macOS) prior to the fixed build; base s...

CVE-2013-1383

Adobe Shockwave Player is affected by CVE-2013-1383: a buffer overflow in versions before 12.0.2.122 that can lead to arbitrary code execution. Root cause is a buffer overflow in the Shockwave Player component. The vulnerability is discussed across multiple sources (Red Hat advisory, Nessus/OpenV...

CVE-2009-3466

CVE-2009-3466 affects Adobe Shockwave Player and is described as a memory corruption issue related to an invalid string length, allowing remote code execution via a crafted web page. Affected versions are before 11.5.2.602. The vulnerability is fixed by upgrading to Shockwave Player 11.5.2.602. O...

CVE-2009-4002

Adobe Shockwave Player is affected by CVE-2009-4002 (buffer overflow in 3D model processing) in versions prior to 11.5.6.606. The vulnerability allows remote code execution and is discussed alongside CVE-2009-4003 (integer overflows) in multiple advisories. Affected software: Shockwave Player on ...

CVE-2010-0127

Adobe Shockwave Player is affected by CVE-2010-0127 (and related CVEs) up to version 11.5.6.606. The root cause is memory corruption triggered by crafted FFFFFF45h Shockwave 3D blocks in Shockwave files, leading to remote code execution or denial of service. The Mac OS X and Windows vulnerabiliti...

CVE-2010-2867

CVE-2010-2867 affects Adobe Shockwave Player (before 11.5.8.612). The vulnerability lies in the Director RIFF-based parsing of the rcsL chunk, where DIRAPIX sign-extends a WORD value and uses it as a heap buffer offset, enabling remote attackers to cause a denial of service (heap memory corruptio...

CVE-2010-4187

Adobe Shockwave Player (pre-11.5.9.620) is affected by CVE-2010-4187 via malformed Director file chunks, enabling arbitrary code execution or memory corruption. This vulnerability is part of a broader set of issues in Shockwave Player (incl. CVEs 2010-2587/8/9, 2010-4092/3/4/5/6, 2011-0555/56/7) ...

CVE-2010-4308

CVE-2010-4308 (Adobe Shockwave Player) affects Shockwave Player versions prior to 11.6.1.629 on multiple platforms. The vulnerability is described as memory corruption that can lead to arbitrary code execution or a denial of service via unspecified vectors; the entry groups it with CVE-2010-4309 ...

CVE-2011-2114

CVE-2011-2114 affects Adobe Shockwave Player (Shockwave 3D Asset.x32 DEMX) and is described by ZDI as a remote code execution via a crafted DEMX chunk in the RIFF-based Director format. The vulnerability causes heap memory overwrite during parsing and requires user interaction (visiting a malicio...

CVE-2011-2119

Technical details about CVE-2011-2119 are not publicly provided in the supplied documents. Monitor for updates; Initial description notes a Dirapi.dll memory corruption/arbitrary code risk in Adobe Shockwave Player prior to 11.6.0.626, but no further specifics are present here.