CVE-2010-1288

CVE-2010-1288 is a buffer overflow in Adobe Shockwave Player prior to version 11.5.7.609 that could allow arbitrary code execution via unspecified vectors. The vulnerability is part of a set of issues targeted by Adobe APSB10-12, affecting Shockwave Player 11.5.6.606 and earlier on Windows and ma...

CVE-2010-2587

Adobe Shockwave Player (dirapi.dll) is affected by CVE-2010-2587 and related CVEs due to a parsing flaw in the IFWV chunk size handling that can lead to memory corruption and potentially arbitrary code execution or a denial of service. Affected product/version: Shockwave Player prior to 11.5.9.62...

CVE-2010-2865

Adobe Shockwave Player prior to 11.5.8.612 is affected by CVE-2010-2865, a denial-of-service vulnerability reported in APSB10-20. The issue is described as an unspecified DoS via unknown vectors, with the macro summary indicating memory-related issues across Shockwave components. The advisory not...

CVE-2010-4089

CVE-2010-4089 affects Adobe Shockwave Player, where IML32.dll can memory-corrupt via a crafted .dir file containing duplicated LCSM entries in an mmap record. This enables arbitrary code execution or a denial of service. Affected versions are Shockwave Player prior to 11.5.9.615. Remediation: upg...

CVE-2011-0335

CVE-2011-0335 affects Adobe Shockwave Player and is tied to Dirapi.dll. The initial description states that before version 11.6.0.626, users could trigger arbitrary code execution or memory corruption via unspecified vectors, with possible DoS. Connected sources corroborate multiple CVEs in the s...

CVE-2012-0760

The CVE-2012-0760 entry concerns Adobe Shockwave Player’s Shockwave 3D Asset component, affected in versions prior to 11.6.4.634. The vulnerability allows arbitrary code execution or a denial of service due to memory corruption via unspecified vectors, as part of a family of Shockwave issues (sha...

CVE-2012-0761

Adobe Shockwave Player before 11.6.4.634 is affected by a vulnerability in the Shockwave 3D Asset component (CVE-2012-0761) that can lead to arbitrary code execution or a denial of service due to memory corruption via unspecified vectors. The Red Hat advisories reference the same family of vulner...

CVE-2010-4195

Adobe Shockwave Player TextXtra.x32 DEMUX parsing path (TextXtra module) before 11.5.9.620 contains an input validation flaw that can lead to remote arbitrary code execution when processing unspecified input data. Details indicate multiple CVEs (including CVE-2010-4195) under APSB11-01; exact vec...

CVE-2012-0762

CVE-2012-0762 affects the Shockwave 3D Asset component in Adobe Shockwave Player; prior to version 11.6.4.634, it allows attackers to execute arbitrary code or cause memory corruption/DoS via unspecified vectors. This is documented in Red Hat CVEs list as part of a family to CVE-2012-0757/0760/07...

CVE-2014-0501

Adobe Shockwave Player before 12.0.9.149 is affected by CVE-2014-0501 (distinct from CVE-2014-0500) and can allow remote code execution or memory corruption via unspecified vectors. The vulnerability affects Shockwave Player on Windows and macOS; Adobe issued APSB14-06 to address these issues (up...

CVE-2007-5941

The CVE-2007-5941 issue is a stack-based buffer overflow in the SWCtl.SWCtl ActiveX control of Adobe Shockwave. The vulnerability allows remote attackers to cause a denial of service and potentially execute arbitrary code via a long argument to the ShockwaveVersion method. Connected documents con...

CVE-2009-3466

CVE-2009-3466 affects Adobe Shockwave Player and is described as a memory corruption issue related to an invalid string length, allowing remote code execution via a crafted web page. Affected versions are before 11.5.2.602. The vulnerability is fixed by upgrading to Shockwave Player 11.5.2.602. O...

CVE-2010-0130

CVE-2010-0130 is an Adobe Shockwave Player integer overflow vulnerability disclosed for vulnerability in Shockwave Player prior to 11.5.7.609. The issue arises when processing Director (.dir) files, enabling remote code execution. Affected software: Adobe Shockwave Player (versions before 11.5.7....

CVE-2010-1286

Adobe Shockwave Player prior to 11.5.7.609 is affected by multiple vulnerabilities including CVE-2010-1286, described as memory corruption that could lead to denial of service or potentially arbitrary code execution via unspecified vectors. The CVE set is associated with Shockwave versions up to ...

CVE-2010-2872

Adobe Shockwave Player (Windows/macOS) prior to 11.5.8.612 is affected by CVE-2010-2872, a memory-corruption vulnerability in the Director pami RIFF chunk offset parsing that can lead to remote code execution or a denial of service when a crafted DIR/movie is opened. Root cause: improper validati...

CVE-2010-4085

CVE-2010-4085 affects Adobe Shockwave Player (dirapi.dll) prior to version 11.5.9.615. The vulnerability is a memory corruption issue that can lead to arbitrary code execution or a denial of service via unspecified vectors. Affected software: Adobe Shockwave Player (Windows/macOS) with the vulner...

CVE-2010-4191

Adobe Shockwave Player is affected by multiple remote code execution and memory corruption vulnerabilities (CVE-2010-2587/2588/2589, 2010-4092/4093/4187/4190/4191/4192/4306/4194/4195/4196, 2011-0555/0556/0557/0569, among others) tied to the dirapi.dll and related components. The consolidated advi...

CVE-2012-0766

Adobe Shockwave Player prior to 11.6.4.634 is affected by a vulnerability in the Shockwave 3D Asset component leading to arbitrary code execution or memory corruption. The issue is described across CVE-2012-0766 and related entries (CVE-2012-0757, 0760, 0761, 0762, 0763, 0764); Red Hat advisories...

CVE-2012-2032

Adobe Shockwave Player is affected by multiple memory-corruption/remote code-execution vulnerabilities tracked as CVE-2012-2030 to CVE-2012-2033. The connected advisories attribute the issue to a parsing error in the DIR/DCR RIFF-like data within Shockwave files (rcsL chunk), which can be trigger...

CVE-2012-2047

Affected software: Adobe Shockwave Player (before 11.6.6.636). Vulnerability: memory corruption that can allow arbitrary code execution or cause a denial of service via unspecified vectors (distinct from CVE-2012-2043, -2044, -2045, -2046). Root cause/impact: memory corruption leading to potentia...

CVE-2012-6270

CVE-2012-6270 concerns Adobe Shockwave Player up to version 11.6.8.638. A crafted HTML document referencing Shockwave content with a specific compatibility parameter can trigger installation of the Shockwave 10.4.0.025 compatibility feature, enabling a “downgrading” scenario. Publicly available s...

CVE-2010-1281

CVE-2010-1281 affects Adobe Shockwave Player (pre-11.5.7.609). The vulnerability is in iml32.dll where a value read from a file used in Director file-pointer calculations is not validated, enabling remote code execution or memory corruption via a crafted .dir file. Exploitation requires user inte...

CVE-2010-2588

Adobe Shockwave Player

CVE-2010-2863

Adobe Shockwave Player before 11.5.8.612 is affected by memory corruption vulnerabilities (e.g., CVE-2010-2863) that could allow denial of service or arbitrary code execution via unspecified vectors. Affected versions include 11.5.7.609 and earlier on Windows/Mac, with multiple related CVEs (e.g....

CVE-2010-4189

Adobe Shockwave Player contains a vulnerability in the IML32 module used when parsing GIFs within Director movies. A crafted GIF image with a manipulated global color table size triggers an out-of-range pointer offset, enabling memory corruption and potentially arbitrary code execution or a denia...

CVE-2011-2112

Adobe Shockwave Player (Windows/macOS) is affected by CVE-2011-2112 due to multiple buffer overflows in IML32.dll. This can allow remote code execution and requires exploitation of unspecified vectors. Affected versions are before 11.6.0.626; patching to 11.6.0.626 (or newer) is the remediation s...

CVE-2011-2114

CVE-2011-2114 affects Adobe Shockwave Player (Shockwave 3D Asset.x32 DEMX) and is described by ZDI as a remote code execution via a crafted DEMX chunk in the RIFF-based Director format. The vulnerability causes heap memory overwrite during parsing and requires user interaction (visiting a malicio...

CVE-2011-2446

CVE-2011-2446 affects Adobe Shockwave Player’s DIRAPI.dll (before 11.6.3.633). The issue is a memory corruption/arbitrary code execution vulnerability via unspecified vectors in the Shockwave Player, as part of the Nov 2011 set of vulnerabilities (APSB11-27). Connected sources corroborate multipl...

CVE-2010-0127

Adobe Shockwave Player is affected by CVE-2010-0127 (and related CVEs) up to version 11.5.6.606. The root cause is memory corruption triggered by crafted FFFFFF45h Shockwave 3D blocks in Shockwave files, leading to remote code execution or denial of service. The Mac OS X and Windows vulnerabiliti...

CVE-2010-2879

Adobe Shockwave Player contains a CVE-2010-2879 vulnerability: an integer overflow in the TextXtra.x32 allocator can cause heap memory corruption, enabling remote code execution or a denial of service. Affected product/version: Shockwave Player before 11.5.8.612. Root cause: faulty heap allocatio...

CVE-2010-4190

Adobe Shockwave Player (pre-11.5.9.620) is affected by CVE-2010-4190 through malformed CSWV RIFF chunks that miscalculate an offset for a substructure, causing an out-of-bounds heap memory seek and potential arbitrary code execution or memory corruption. Root cause: incorrect offset calculation d...

CVE-2010-4192

Adobe Shockwave Player before 11.5.9.620 is affected by CVE-2010-4192, among others, via a crafted Director 3D Assets 0xFFFFFF88 record that triggers an incorrect memory allocation. This can lead to arbitrary code execution or memory corruption and, in some cases, a denial of service. The vulnera...

CVE-2012-2043

CVE-2012-2043 affects Adobe Shockwave Player prior to 11.6.6.636. The flaw allows attackers to execute arbitrary code or cause a memory corruption-based denial of service via unspecified vectors, as part of a set of CVEs (2043–2047). The cited NVD entry lists a base score of 10.0 (HIGH) with netw...

CVE-2012-2045

CVE-2012-2045 affects Adobe Shockwave Player prior to 11.6.6.636 . The vulnerability is described as memory corruption that allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors. The provided connected documents do not specify the exact root cause details...

CVE-2012-5273

CVE-2012-5273 is listed with Adobe Shockwave Player vulnerabilities (Mac OS X and Windows). The connected sources confirm a buffer overflow vulnerability in Shockwave Player that can lead to arbitrary code execution, associated with versions around 11.x (noted as

CVE-2013-3348

Adobe Shockwave Player is affected on multiple platforms by CVE-2013-3348. The vulnerability exists in versions before 12.0.3.133, with references to older builds (e.g., 12.0.2.122 and earlier) that can be exploited via a remote vector to cause memory corruption, enabling arbitrary code execution...

CVE-2014-0505

Adobe Shockwave Player is vulnerable to a memory corruption issue leading to arbitrary code execution or DoS. Affected versions include 12.0.9.149 and earlier, with the issue being exploitable via a user-tricked playback of a malicious Shockwave file; the exact vectors are not specified in the pr...

CVE-2010-2866

CVE-2010-2866 is an Adobe Shockwave Player vulnerability caused by an integer signedness error in the DIRAPI module during parsing of tSAC chunks in Director movies. The flaw can allow remote code execution or memory corruption leading to a denial of service, if a negative/large count value is pr...

CVE-2010-2869

Adobe Shockwave Player (IML32.dll) is affected by CVE-2010-2869 due to improper parsing of .dir files, causing memory corruption that can lead to denial of service or arbitrary code execution. A PoC file offset at 0x3712 demonstrates the issue. Vulnerable versions include Shockwave Player 11.5.7....

CVE-2010-4087

Adobe Shockwave Player (IML32.dll) is affected by CVE-2010-4087: memory corruption via a crafted .dir mmap record with an invalid VSWV entry length, leading to possible arbitrary code execution or denial of service. This vulnerability is described as existing in Shockwave Player before version 11...

CVE-2010-4092

Adobe Shockwave Player contains a Use-After-Free vulnerability (CVE-2010-4092) in an unspecified compatibility component related to the Settings window and an unloaded library. Affected software is Shockwave Player before version 11.5.9.620. The issue allows user-assisted remote code execution wh...

CVE-2010-4187

Adobe Shockwave Player (pre-11.5.9.620) is affected by CVE-2010-4187 via malformed Director file chunks, enabling arbitrary code execution or memory corruption. This vulnerability is part of a broader set of issues in Shockwave Player (incl. CVEs 2010-2587/8/9, 2010-4092/3/4/5/6, 2011-0555/56/7) ...

CVE-2011-2113

CVE-2011-2113 affects Adobe Shockwave Player, specifically the Shockwave3DAsset component. It stems from buffer overflows/memory corruption in the Shockwave3DAsset/DEM X chunk handling, allowing arbitrary code execution. Affected product: Shockwave Player prior to 11.6.0.626. Vendor patch APSB11-...

CVE-2012-2031

Adobe Shockwave Player (Windows/macOS) has a memory corruption vulnerability (CVE-2012-2031) in parsing the rcsL DIR/DCR chunk of OBJ/RIF data, described as a remote code execution flaw when a user opens a crafted DIR/DCR file. The advisory notes that a remote attacker could execute arbitrary cod...

CVE-2013-1383

Adobe Shockwave Player is affected by CVE-2013-1383: a buffer overflow in versions before 12.0.2.122 that can lead to arbitrary code execution. Root cause is a buffer overflow in the Shockwave Player component. The vulnerability is discussed across multiple sources (Red Hat advisory, Nessus/OpenV...

CVE-2013-5333

Affected product: Adobe Shockwave Player prior to 12.0.7.148. The vulnerability (CVE-2013-5333) is a memory corruption issue that can allow remote code execution or a denial of service via unspecified vectors. The issue is fixed in patched versions released with APSB13-29 (Adobe Security Update f...

CVE-2009-3465

CVE-2009-3465 affects Adobe Shockwave Player prior to 11.5.2.602. An invalid pointer vulnerability in processing crafted Shockwave content can allow remote code execution via a web page. Impact is arbitrary code execution with network access and no user interaction required per the referenced adv...

CVE-2009-4002

Adobe Shockwave Player is affected by CVE-2009-4002 (buffer overflow in 3D model processing) in versions prior to 11.5.6.606. The vulnerability allows remote code execution and is discussed alongside CVE-2009-4003 (integer overflows) in multiple advisories. Affected software: Shockwave Player on ...

CVE-2010-2589

CVE-2010-2589 : Integer overflow in the dirapi.dll of Adobe Shockwave Player (pre-11.5.9.620) can lead to arbitrary code execution. Affected versions include 11.5.9.615 and earlier. Remediation: upgrade to 11.5.9.620 per APSB11-01. "

CVE-2010-4084

Adobe Shockwave Player