CVE-2011-0320

Adobe Shockwave Player (Windows/macOS)

CVE-2011-2108

CVE-2011-2108 affects Adobe Shockwave Player prior to version 11.6.0.626. The vulnerability is described as an arbitrary code execution flaw due to a design flaw, with unspecified vectors. The issue is listed across multiple sources (NVD entry for CVE-2011-2108 and vulnerability references in Nes...

CVE-2011-2119

Technical details about CVE-2011-2119 are not publicly provided in the supplied documents. Monitor for updates; Initial description notes a Dirapi.dll memory corruption/arbitrary code risk in Adobe Shockwave Player prior to 11.6.0.626, but no further specifics are present here.

CVE-2011-2123

CVE-2011-2123 affects Adobe Shockwave Player’s Shockwave 3D Asset x32 component. The vulnerability is described as an integer overflow in a DEMX subrecord during parsing, causing a heap-based buffer overflow and enabling remote code execution. Public references identify affected versions as Shock...

CVE-2012-4174

Adobe Shockwave Player before 11.6.8.638 is vulnerable to CVE-2012-4174 due to a buffer overflow in Shockwave, allowing arbitrary code execution. Connected docs corroborate this family of vulnerabilities (including CVE-2012-4172/4173/4175/5273) and list affected versions; remediation guidance in ...

CVE-2005-3525

CVE-2005-3525 corresponds to a stack-based buffer overflow in the Shockwave Player ActiveX installer (ActiveX control used to install Shockwave). The flaw exists in the installer ActiveX control and can be exploited by supplying crafted large values to two parameters, enabling remote code executi...

CVE-2010-2864

CVE-2010-2864 affects Adobe Shockwave Player (pre-11.5.8.612). The vulnerability exists in IML32.dll when parsing malformed .dir media files, which can trigger a memory corruption that enables remote code execution or a denial of service. Exploitation is demonstrated by a crafted PoC with an inva...

CVE-2010-2867

CVE-2010-2867 affects Adobe Shockwave Player (before 11.5.8.612). The vulnerability lies in the Director RIFF-based parsing of the rcsL chunk, where DIRAPIX sign-extends a WORD value and uses it as a heap buffer offset, enabling remote attackers to cause a denial of service (heap memory corruptio...

CVE-2010-2876

CVE-2010-2876 concerns Adobe Shockwave Player. The vulnerability lies in parsing a FFFFFF88 record in Director (.dir/.dcr) files, where values used to compute a heap buffer size are overflowed, leading to heap memory corruption and potential remote code execution. Affected product: Shockwave Play...

CVE-2010-2877

Adobe Shockwave Player is affected by CVE-2010-2877 (and related CVEs) where a Director movie count value is not properly validated, enabling heap memory corruption and potential code execution. Affected component paths include IML32X.dll and DIRAPIX.dll, with the vulnerability enabling remote co...

CVE-2010-4090

Summary of CVE-2010-4090: Adobe Shockwave Player prior to version 11.5.9.615 is vulnerable to memory corruption that can lead to arbitrary code execution or denial of service via unspecified vectors. The affected component is the Shockwave Player plugin; vulnerability details consistently refer t...

CVE-2010-4187

Adobe Shockwave Player (pre-11.5.9.620) is affected by CVE-2010-4187 via malformed Director file chunks, enabling arbitrary code execution or memory corruption. This vulnerability is part of a broader set of issues in Shockwave Player (incl. CVEs 2010-2587/8/9, 2010-4092/3/4/5/6, 2011-0555/56/7) ...

CVE-2010-4194

Adobe Shockwave Player contains a vulnerability CVE-2010-4194 in the dirapi.dll module where input data is not properly validated. This can enable remote code execution via unspecified vectors on versions before 11.5.9.620. Mitigation: update to Shockwave Player 11.5.9.620 as described in APSB11-...

CVE-2010-4306

CVE-2010-4306 affects Adobe Shockwave Player prior to version 11.5.9.620. The vulnerability allows arbitrary code execution or a denial of service due to memory corruption via unspecified vectors. The entry notes multiple related CVEs and a high-severity impact (NVD base score 9.3). There are no ...

CVE-2011-2113

CVE-2011-2113 affects Adobe Shockwave Player, specifically the Shockwave3DAsset component. It stems from buffer overflows/memory corruption in the Shockwave3DAsset/DEM X chunk handling, allowing arbitrary code execution. Affected product: Shockwave Player prior to 11.6.0.626. Vendor patch APSB11-...

CVE-2011-2117

Adobe Shockwave Player (pre-11.6.0.626) is affected by multiple memory corruption/unspecified-vulnerability defects that can lead to arbitrary code execution or memory corruption, including CVEs such as 2011-2117. The issues affect multiple components (e.g., Dirapi.dll, IML32.dll, Shockwave3DAsse...

CVE-2011-2121

Adobe Shockwave Player is affected by CVE-2011-2121 due to an integer overflow in the AudioMixer.x32 module when parsing mixer structures from Director files. This can allow remote code execution under the user’s context, with exploitation requiring user interaction (per ZDI). Affected product/ve...

CVE-2012-2044

Adobe Shockwave Player before 11.6.6.636 is vulnerable to a memory corruption flaw that can be exploited to execute arbitrary code or cause a denial of service via unspecified vectors. This CVE is described as a single vulnerability distinct from CVE-2012-2043 and CVE-2012-2045–2047 within the sa...

CVE-2012-2046

CVE-2012-2046 affects Adobe Shockwave Player before 11.6.6.636. The vulnerability enables arbitrary code execution or a denial of service (memory corruption) via unspecified vectors. The available connected documents corroborate that this is a memory‑corruption issue in Shockwave Player, not deta...

CVE-2012-4173

Adobe Shockwave Player before 11.6.8.638 is vulnerable to a buffer overflow that allows arbitrary code execution via unspecified vectors (CVE-2012-4172, CVE-2012-4173, CVE-2012-4174, CVE-2012-4175, CVE-2012-5273). Affected product: Shockwave Player (Windows/macOS) prior to the fixed build; base s...

CVE-2009-3465

CVE-2009-3465 affects Adobe Shockwave Player prior to 11.5.2.602. An invalid pointer vulnerability in processing crafted Shockwave content can allow remote code execution via a web page. Impact is arbitrary code execution with network access and no user interaction required per the referenced adv...

CVE-2009-4002

Adobe Shockwave Player is affected by CVE-2009-4002 (buffer overflow in 3D model processing) in versions prior to 11.5.6.606. The vulnerability allows remote code execution and is discussed alongside CVE-2009-4003 (integer overflows) in multiple advisories. Affected software: Shockwave Player on ...

CVE-2010-2874

Adobe Shockwave Player is affected by CVE-2010-2874 (and related CVEs) due to memory corruption that could allow remote code execution. The issue affects Shockwave Player builds prior to 11.5.8.612 on Windows and Mac, with initial reports noting possible uninitialized-pointer or incorrect-pointer...

CVE-2010-2875

CVE-2010-2875 concerns an integer signedness error in Adobe Shockwave Player before 11.5.8.612, triggered while parsing the tSAC chunk in Adobe Director files. The signedness issue can cause memory corruption, enabling a remote attacker to cause a denial of service or execute arbitrary code. Affe...

CVE-2010-4308

CVE-2010-4308 (Adobe Shockwave Player) affects Shockwave Player versions prior to 11.6.1.629 on multiple platforms. The vulnerability is described as memory corruption that can lead to arbitrary code execution or a denial of service via unspecified vectors; the entry groups it with CVE-2010-4309 ...

CVE-2010-4309

CVE-2010-4309 concerns Adobe Shockwave Player prior to 11.6.1.629, which is exposed to memory-corruption vulnerabilities that can lead to arbitrary code execution or a denial of service. The issue is tied to memory-corruption vulnerabilities in Shockwave Player, with multiple third‑party advisori...

CVE-2011-2109

Adobe Shockwave Player contains multiple memory corruption and integer overflow vulnerabilities in Dirapi.dll that can lead to arbitrary code execution. CVE-2011-2109 is tied to multiple integer overflows in Dirapi.dll, with root cause in size/length handling during parsing (rcsL/Director file fo...

CVE-2011-2116

CVE-2011-2116 affects Adobe Shockwave Player; the vulnerability arises from parsing the Lnam chunk in Shockwave’s RIFF-based Director files, causing memory corruption in IML32.dll and enabling remote code execution. Affected product: Adobe Shockwave Player (IML32.dll). Impact: remote arbitrary co...

CVE-2011-2120

Adobe Shockwave Player contains an integer overflow in the CursorAsset x32 component that can lead to remote code execution. Affected are Shockwave Player versions before 11.6.0.626 (and earlier Mac OS X builds cited). Public advisories (APSB11-17) and the ZDI entry confirm this vulnerability cla...

CVE-2011-2421

Adobe Shockwave Player contains a vulnerability CVE-2011-2421 in Dirapi.dll affecting versions before 11.6.1.629. A crafted .dir media file can lead to arbitrary code execution or memory corruption (potential DoS). Public references include Adobe APSB11-19 and related advisories; exploit/real-wor...

CVE-2012-4172

Adobe Shockwave Player versions affected include

CVE-2013-0636

Adobe Shockwave Player is affected by CVE-2013-0636 (stack-based buffer overflow) and CVE-2013-0635 (memory corruption) with exploitation leading to arbitrary code execution. The vulnerability applies to Shockwave Player versions before 12.0.0.112, and per APSB13-06 also to Windows/macOS builds

CVE-2009-2186

Adobe Shockwave Player is affected by CVE-2009-2186, an unspecified vulnerability that allows remote code execution in versions before 11.0.0.465. The issue is related to an older vulnerability (CVE-2009-1860) which was previously resolved in 11.0.0.465. Affected product: Shockwave Player (Window...

CVE-2009-4003

CVE-2009-4003 concerns multiple integer overflow vulnerabilities in Adobe Shockwave Player prior to 11.5.6.606, reported across several sources. The flaws occur during Shockwave processing (notably in 3D blocks) and can lead to heap memory corruption and potential remote code execution. Affected ...

CVE-2010-1283

Adobe Shockwave Player before 11.5.7.609 is affected by CVE-2010-1283 due to a memory corruption flaw while parsing 3D blocks in Director (.dir) files (0xFFFFFF49). Exploitation could allow remote code execution or cause a denial of service. Affected product: Adobe Shockwave Player. Remediation: ...

CVE-2011-0317

Adobe Shockwave Player contains a vulnerability in Dirapi.dll (CVE-2011-0317) that allows arbitrary code execution or memory corruption. Affected products are Shockwave Player versions before 11.6.0.626 for Mac OS X (and related lines in the CVE list), with exploitation described as via unspecifi...

CVE-2011-0318

Adobe Shockwave Player (Mac OS X)

CVE-2011-0556

Adobe Shockwave Player (Windows/macOS) is affected by CVE-2011-0556 via the Font Xtra.x32 module. The vulnerability stems from parsing the PFR1 chunk where a 16-bit size value is sign-extended, enabling memory corruption and arbitrary code execution or a crash. Affected versions are before 11.5.9...

CVE-2011-2115

CVE-2011-2115 affects Adobe Shockwave Player; the IML32.dll memory corruption vulnerability is triggered by crafted tSAC chunks, causing a heap-based buffer overflow that can lead to arbitrary code execution or a denial of service. Affected products are Adobe Shockwave Player versions older than ...

CVE-2011-2449

CVE-2011-2449 affects Adobe Shockwave Player's TextXtra module, with versions before 11.6.3.633 vulnerable to memory corruption that can enable arbitrary code execution or cause a denial of service. The vulnerability is present across affected builds (e.g., Windows and Mac OS X) and is tied to th...

CVE-2012-4175

Adobe Shockwave Player vulnerability CVE-2012-4175 (and related CVEs) affects before 11.6.8.638. A buffer overflow in Shockwave Player can allow arbitrary code execution via unspecified vectors. Connected sources (OpenVAS/Nessus plugins) confirm multiple vulnerabilities in Shockwave Player (Windo...

CVE-2013-1384

Adobe Shockwave Player versions before 12.0.2.122 are affected by CVE-2013-1384 and CVE-2013-1386 (and related advisories). The Red Hat entries corroborate that these flaws allow arbitrary code execution or memory corruption/DoS via unspecified vectors, with the CVEs distinguished from each other...

CVE-2010-2878

Adobe Shockwave Player contains a DIRAPIX.dll flaw (CVE-2010-2878) where improper handling of a Director movie buffer seek leads to heap memory corruption, enabling remote code execution or crash. Affected product: Shockwave Player before 11.5.8.612. Attack requires a crafted movie; vendor adviso...

CVE-2010-2882

Summary of CVE-2010-2882 (Adobe Shockwave Player) : Affected software is Shockwave Player for Windows and macOS (versions 11.5.7.609 and older). The vulnerability stems from how DIRAPI.dll parses .dir media files, leading to a memory corruption condition that can cause remote denial of service or...

CVE-2010-4193

CVE-2010-4193 concerns Adobe Shockwave Player before 11.5.9.620, which does not properly validate unspecified input data, allowing attackers to execute arbitrary code via unknown vectors. Affected versions include 11.5.9.615 and earlier; Adobe APSB11-01 fixes this by upgrading to 11.5.9.620. Mult...

CVE-2011-2419

CVE-2011-2419 affects Adobe Shockwave Player where the IML32.dll enables memory corruption leading to remote code execution (and DoS) for vulnerable versions. Public details in connected docs indicate the vulnerability spans Shockwave Player versions prior to 11.6.1.629, with advisories APSB11-19...

CVE-2012-0758

CVE-2012-0758 is tied to a heap-based buffer overflow in Adobe Shockwave Player prior to version 11.6.4.634. The vulnerability could allow arbitrary code execution and is listed as a critical issue (Windows and macOS). Affected versions include Shockwave Player 11.6.3.633 and earlier, with exploi...

CVE-2012-4176

CVE-2012-4176 affects Adobe Shockwave Player prior to 11.6.8.638. An array index error in the plugin can allow remote arbitrary code execution. The vulnerability is triggered by processing a crafted Shockwave file, with no user interaction required in the referenced descriptions. The patched vers...

CVE-2012-6271

Adobe Shockwave Player (Windows and Mac OS X) up to version 11.6.8.638 is affected by CVE-2012-6271: a Shockwave movie containing an Xtra URL can trigger installation of arbitrary signed Xtras, which can allow remote code execution. Root cause described in the CVE entry is the ability to install ...

CVE-2013-0635

Adobe Shockwave Player is affected by CVE-2013-0635. The vulnerability exists in versions prior to 12.0.0.112 and can allow arbitrary code execution or cause a denial of service via memory corruption. The issue is triggered when a user opens a malicious Shockwave file, with the exact attack vecto...