CVE-2010-2865

Adobe Shockwave Player prior to 11.5.8.612 is affected by CVE-2010-2865, a denial-of-service vulnerability reported in APSB10-20. The issue is described as an unspecified DoS via unknown vectors, with the macro summary indicating memory-related issues across Shockwave components. The advisory not...

CVE-2010-4188

CVE-2010-4188 affects Adobe Shockwave Player and involves a heap-based buffer overflow in the dirapi.dll module caused by processing a Director movie with an IFWV chunk size of 0. This can lead to remote code execution or memory corruption. The vulnerability is part of a set of issues in Shockwav...

CVE-2011-2112

Adobe Shockwave Player (Windows/macOS) is affected by CVE-2011-2112 due to multiple buffer overflows in IML32.dll. This can allow remote code execution and requires exploitation of unspecified vectors. Affected versions are before 11.6.0.626; patching to 11.6.0.626 (or newer) is the remediation s...

CVE-2012-2031

Adobe Shockwave Player (Windows/macOS) has a memory corruption vulnerability (CVE-2012-2031) in parsing the rcsL DIR/DCR chunk of OBJ/RIF data, described as a remote code execution flaw when a user opens a crafted DIR/DCR file. The advisory notes that a remote attacker could execute arbitrary cod...

CVE-2010-0987

Adobe Shockwave Player contains a heap-based buffer overflow (CVE-2010-0987) exploitable via crafted embedded fonts in Shockwave files. Affected product: Shockwave Player before version 11.5.7.609. Connected sources corroborate the vulnerability as part of multiple font-related shocks and describ...

CVE-2010-1287

Adobe Shockwave Player for Windows/macOS prior to 11.5.7.609 is affected by multiple memory corruption vulnerabilities, including CVE-2010-1287, that can cause denial of service or potentially allow arbitrary code execution via unspecified vectors. The vulnerability family is evidenced by multipl...

CVE-2010-2870

Adobe Shockwave Player (DIRAPIX.dll) up to version 11.5.8.612 is vulnerable due to improper validation of a chunk size in the mmap chunk of Director movies, enabling remote code execution or heap memory corruption. The flaw resides in the RIFF-based Director file format parsing within the DIRAPIX...

CVE-2010-2872

Adobe Shockwave Player (Windows/macOS) prior to 11.5.8.612 is affected by CVE-2010-2872, a memory-corruption vulnerability in the Director pami RIFF chunk offset parsing that can lead to remote code execution or a denial of service when a crafted DIR/movie is opened. Root cause: improper validati...

CVE-2010-4189

Adobe Shockwave Player contains a vulnerability in the IML32 module used when parsing GIFs within Director movies. A crafted GIF image with a manipulated global color table size triggers an out-of-range pointer offset, enabling memory corruption and potentially arbitrary code execution or a denia...

CVE-2011-0335

CVE-2011-0335 affects Adobe Shockwave Player and is tied to Dirapi.dll. The initial description states that before version 11.6.0.626, users could trigger arbitrary code execution or memory corruption via unspecified vectors, with possible DoS. Connected sources corroborate multiple CVEs in the s...

CVE-2010-4088

CVE-2010-4088 affects Adobe Shockwave Player prior to 11.5.9.615, via the DIRAPI.dll path where parsing a .dir media file with duplicated KEY* references can cause memory corruption, enabling code execution or a crash. Affected component: Shockwave Player (DIRAPI.dll); vulnerable condition: malfo...

CVE-2012-0760

The CVE-2012-0760 entry concerns Adobe Shockwave Player’s Shockwave 3D Asset component, affected in versions prior to 11.6.4.634. The vulnerability allows arbitrary code execution or a denial of service due to memory corruption via unspecified vectors, as part of a family of Shockwave issues (sha...

CVE-2013-5333

Affected product: Adobe Shockwave Player prior to 12.0.7.148. The vulnerability (CVE-2013-5333) is a memory corruption issue that can allow remote code execution or a denial of service via unspecified vectors. The issue is fixed in patched versions released with APSB13-29 (Adobe Security Update f...

CVE-2009-3466

CVE-2009-3466 affects Adobe Shockwave Player and is described as a memory corruption issue related to an invalid string length, allowing remote code execution via a crafted web page. Affected versions are before 11.5.2.602. The vulnerability is fixed by upgrading to Shockwave Player 11.5.2.602. O...

CVE-2010-1288

CVE-2010-1288 is a buffer overflow in Adobe Shockwave Player prior to version 11.5.7.609 that could allow arbitrary code execution via unspecified vectors. The vulnerability is part of a set of issues targeted by Adobe APSB10-12, affecting Shockwave Player 11.5.6.606 and earlier on Windows and ma...

CVE-2010-4085

CVE-2010-4085 affects Adobe Shockwave Player (dirapi.dll) prior to version 11.5.9.615. The vulnerability is a memory corruption issue that can lead to arbitrary code execution or a denial of service via unspecified vectors. Affected software: Adobe Shockwave Player (Windows/macOS) with the vulner...

CVE-2012-2043

CVE-2012-2043 affects Adobe Shockwave Player prior to 11.6.6.636. The flaw allows attackers to execute arbitrary code or cause a memory corruption-based denial of service via unspecified vectors, as part of a set of CVEs (2043–2047). The cited NVD entry lists a base score of 10.0 (HIGH) with netw...

CVE-2013-1383

Adobe Shockwave Player is affected by CVE-2013-1383: a buffer overflow in versions before 12.0.2.122 that can lead to arbitrary code execution. Root cause is a buffer overflow in the Shockwave Player component. The vulnerability is discussed across multiple sources (Red Hat advisory, Nessus/OpenV...

CVE-2007-5941

The CVE-2007-5941 issue is a stack-based buffer overflow in the SWCtl.SWCtl ActiveX control of Adobe Shockwave. The vulnerability allows remote attackers to cause a denial of service and potentially execute arbitrary code via a long argument to the ShockwaveVersion method. Connected documents con...

CVE-2011-2446

CVE-2011-2446 affects Adobe Shockwave Player’s DIRAPI.dll (before 11.6.3.633). The issue is a memory corruption/arbitrary code execution vulnerability via unspecified vectors in the Shockwave Player, as part of the Nov 2011 set of vulnerabilities (APSB11-27). Connected sources corroborate multipl...

CVE-2012-0761

Adobe Shockwave Player before 11.6.4.634 is affected by a vulnerability in the Shockwave 3D Asset component (CVE-2012-0761) that can lead to arbitrary code execution or a denial of service due to memory corruption via unspecified vectors. The Red Hat advisories reference the same family of vulner...

CVE-2012-0762

CVE-2012-0762 affects the Shockwave 3D Asset component in Adobe Shockwave Player; prior to version 11.6.4.634, it allows attackers to execute arbitrary code or cause memory corruption/DoS via unspecified vectors. This is documented in Red Hat CVEs list as part of a family to CVE-2012-0757/0760/07...

CVE-2010-2863

Adobe Shockwave Player before 11.5.8.612 is affected by memory corruption vulnerabilities (e.g., CVE-2010-2863) that could allow denial of service or arbitrary code execution via unspecified vectors. Affected versions include 11.5.7.609 and earlier on Windows/Mac, with multiple related CVEs (e.g....

CVE-2010-2864

CVE-2010-2864 affects Adobe Shockwave Player (pre-11.5.8.612). The vulnerability exists in IML32.dll when parsing malformed .dir media files, which can trigger a memory corruption that enables remote code execution or a denial of service. Exploitation is demonstrated by a crafted PoC with an inva...

CVE-2010-2866

CVE-2010-2866 is an Adobe Shockwave Player vulnerability caused by an integer signedness error in the DIRAPI module during parsing of tSAC chunks in Director movies. The flaw can allow remote code execution or memory corruption leading to a denial of service, if a negative/large count value is pr...

CVE-2010-4093

Adobe Shockwave Player before 11.5.9.620 is vulnerable to remote code execution and memory corruption (CVE-2010-4093 among others) due to an integer overflow/heap memory handling issue when parsing certain records (e.g., FFFFFF88). Publicly documented advisories (APSB11-01) describe a specific ov...

CVE-2010-4190

Adobe Shockwave Player (pre-11.5.9.620) is affected by CVE-2010-4190 through malformed CSWV RIFF chunks that miscalculate an offset for a substructure, causing an out-of-bounds heap memory seek and potential arbitrary code execution or memory corruption. Root cause: incorrect offset calculation d...

CVE-2010-4192

Adobe Shockwave Player before 11.5.9.620 is affected by CVE-2010-4192, among others, via a crafted Director 3D Assets 0xFFFFFF88 record that triggers an incorrect memory allocation. This can lead to arbitrary code execution or memory corruption and, in some cases, a denial of service. The vulnera...

CVE-2010-4195

Adobe Shockwave Player TextXtra.x32 DEMUX parsing path (TextXtra module) before 11.5.9.620 contains an input validation flaw that can lead to remote arbitrary code execution when processing unspecified input data. Details indicate multiple CVEs (including CVE-2010-4195) under APSB11-01; exact vec...

CVE-2011-2114

CVE-2011-2114 affects Adobe Shockwave Player (Shockwave 3D Asset.x32 DEMX) and is described by ZDI as a remote code execution via a crafted DEMX chunk in the RIFF-based Director format. The vulnerability causes heap memory overwrite during parsing and requires user interaction (visiting a malicio...

CVE-2012-2032

Adobe Shockwave Player is affected by multiple memory-corruption/remote code-execution vulnerabilities tracked as CVE-2012-2030 to CVE-2012-2033. The connected advisories attribute the issue to a parsing error in the DIR/DCR RIFF-like data within Shockwave files (rcsL chunk), which can be trigger...

CVE-2012-2047

Affected software: Adobe Shockwave Player (before 11.6.6.636). Vulnerability: memory corruption that can allow arbitrary code execution or cause a denial of service via unspecified vectors (distinct from CVE-2012-2043, -2044, -2045, -2046). Root cause/impact: memory corruption leading to potentia...

CVE-2010-0127

Adobe Shockwave Player is affected by CVE-2010-0127 (and related CVEs) up to version 11.5.6.606. The root cause is memory corruption triggered by crafted FFFFFF45h Shockwave 3D blocks in Shockwave files, leading to remote code execution or denial of service. The Mac OS X and Windows vulnerabiliti...

CVE-2010-1283

Adobe Shockwave Player before 11.5.7.609 is affected by CVE-2010-1283 due to a memory corruption flaw while parsing 3D blocks in Director (.dir) files (0xFFFFFF49). Exploitation could allow remote code execution or cause a denial of service. Affected product: Adobe Shockwave Player. Remediation: ...

CVE-2010-1286

Adobe Shockwave Player prior to 11.5.7.609 is affected by multiple vulnerabilities including CVE-2010-1286, described as memory corruption that could lead to denial of service or potentially arbitrary code execution via unspecified vectors. The CVE set is associated with Shockwave versions up to ...

CVE-2010-2588

Adobe Shockwave Player

CVE-2010-2867

CVE-2010-2867 affects Adobe Shockwave Player (before 11.5.8.612). The vulnerability lies in the Director RIFF-based parsing of the rcsL chunk, where DIRAPIX sign-extends a WORD value and uses it as a heap buffer offset, enabling remote attackers to cause a denial of service (heap memory corruptio...

CVE-2010-2873

Adobe Shockwave Player is affected by CVE-2010-2873 and related CVEs due to improper validation of offset values in rcsL RIFF chunks within Director files (.DIR/.DCR). This leads to heap memory corruption and can allow remote code execution or a denial of service when a crafted movie is processed...

CVE-2010-4089

CVE-2010-4089 affects Adobe Shockwave Player, where IML32.dll can memory-corrupt via a crafted .dir file containing duplicated LCSM entries in an mmap record. This enables arbitrary code execution or a denial of service. Affected versions are Shockwave Player prior to 11.5.9.615. Remediation: upg...

CVE-2010-4090

Summary of CVE-2010-4090: Adobe Shockwave Player prior to version 11.5.9.615 is vulnerable to memory corruption that can lead to arbitrary code execution or denial of service via unspecified vectors. The affected component is the Shockwave Player plugin; vulnerability details consistently refer t...

CVE-2010-4191

Adobe Shockwave Player is affected by multiple remote code execution and memory corruption vulnerabilities (CVE-2010-2587/2588/2589, 2010-4092/4093/4187/4190/4191/4192/4306/4194/4195/4196, 2011-0555/0556/0557/0569, among others) tied to the dirapi.dll and related components. The consolidated advi...

CVE-2011-0319

Adobe Shockwave Player is affected by CVE-2011-0319 (Dirapi.dll) with memory corruption/arbitrary code execution. Affected version: Shockwave Player ≤ 11.5.9.620 (Mac OS X); vulnerable component is Dirapi.dll. Root cause: memory corruption/other unspecified vectors leading to code execution. Impa...

CVE-2011-2119

Technical details about CVE-2011-2119 are not publicly provided in the supplied documents. Monitor for updates; Initial description notes a Dirapi.dll memory corruption/arbitrary code risk in Adobe Shockwave Player prior to 11.6.0.626, but no further specifics are present here.

CVE-2011-2123

CVE-2011-2123 affects Adobe Shockwave Player’s Shockwave 3D Asset x32 component. The vulnerability is described as an integer overflow in a DEMX subrecord during parsing, causing a heap-based buffer overflow and enabling remote code execution. Public references identify affected versions as Shock...

CVE-2012-0766

Adobe Shockwave Player prior to 11.6.4.634 is affected by a vulnerability in the Shockwave 3D Asset component leading to arbitrary code execution or memory corruption. The issue is described across CVE-2012-0766 and related entries (CVE-2012-0757, 0760, 0761, 0762, 0763, 0764); Red Hat advisories...

CVE-2012-2045

CVE-2012-2045 affects Adobe Shockwave Player prior to 11.6.6.636 . The vulnerability is described as memory corruption that allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors. The provided connected documents do not specify the exact root cause details...

CVE-2013-0635

Adobe Shockwave Player is affected by CVE-2013-0635. The vulnerability exists in versions prior to 12.0.0.112 and can allow arbitrary code execution or cause a denial of service via memory corruption. The issue is triggered when a user opens a malicious Shockwave file, with the exact attack vecto...

CVE-2010-2877

Adobe Shockwave Player is affected by CVE-2010-2877 (and related CVEs) where a Director movie count value is not properly validated, enabling heap memory corruption and potential code execution. Affected component paths include IML32X.dll and DIRAPIX.dll, with the vulnerability enabling remote co...

CVE-2010-4087

Adobe Shockwave Player (IML32.dll) is affected by CVE-2010-4087: memory corruption via a crafted .dir mmap record with an invalid VSWV entry length, leading to possible arbitrary code execution or denial of service. This vulnerability is described as existing in Shockwave Player before version 11...

CVE-2010-4309

CVE-2010-4309 concerns Adobe Shockwave Player prior to 11.6.1.629, which is exposed to memory-corruption vulnerabilities that can lead to arbitrary code execution or a denial of service. The issue is tied to memory-corruption vulnerabilities in Shockwave Player, with multiple third‑party advisori...