CVE-2011-2119

Technical details about CVE-2011-2119 are not publicly provided in the supplied documents. Monitor for updates; Initial description notes a Dirapi.dll memory corruption/arbitrary code risk in Adobe Shockwave Player prior to 11.6.0.626, but no further specifics are present here.

CVE-2012-4172

Adobe Shockwave Player versions affected include

CVE-2013-0635

Adobe Shockwave Player is affected by CVE-2013-0635. The vulnerability exists in versions prior to 12.0.0.112 and can allow arbitrary code execution or cause a denial of service via memory corruption. The issue is triggered when a user opens a malicious Shockwave file, with the exact attack vecto...

CVE-2010-1286

Adobe Shockwave Player prior to 11.5.7.609 is affected by multiple vulnerabilities including CVE-2010-1286, described as memory corruption that could lead to denial of service or potentially arbitrary code execution via unspecified vectors. The CVE set is associated with Shockwave versions up to ...

CVE-2010-2864

CVE-2010-2864 affects Adobe Shockwave Player (pre-11.5.8.612). The vulnerability exists in IML32.dll when parsing malformed .dir media files, which can trigger a memory corruption that enables remote code execution or a denial of service. Exploitation is demonstrated by a crafted PoC with an inva...

CVE-2010-2873

Adobe Shockwave Player is affected by CVE-2010-2873 and related CVEs due to improper validation of offset values in rcsL RIFF chunks within Director files (.DIR/.DCR). This leads to heap memory corruption and can allow remote code execution or a denial of service when a crafted movie is processed...

CVE-2010-4092

Adobe Shockwave Player contains a Use-After-Free vulnerability (CVE-2010-4092) in an unspecified compatibility component related to the Settings window and an unloaded library. Affected software is Shockwave Player before version 11.5.9.620. The issue allows user-assisted remote code execution wh...

CVE-2010-4306

CVE-2010-4306 affects Adobe Shockwave Player prior to version 11.5.9.620. The vulnerability allows arbitrary code execution or a denial of service due to memory corruption via unspecified vectors. The entry notes multiple related CVEs and a high-severity impact (NVD base score 9.3). There are no ...

CVE-2011-0320

Adobe Shockwave Player (Windows/macOS)

CVE-2011-2109

Adobe Shockwave Player contains multiple memory corruption and integer overflow vulnerabilities in Dirapi.dll that can lead to arbitrary code execution. CVE-2011-2109 is tied to multiple integer overflows in Dirapi.dll, with root cause in size/length handling during parsing (rcsL/Director file fo...

CVE-2011-2113

CVE-2011-2113 affects Adobe Shockwave Player, specifically the Shockwave3DAsset component. It stems from buffer overflows/memory corruption in the Shockwave3DAsset/DEM X chunk handling, allowing arbitrary code execution. Affected product: Shockwave Player prior to 11.6.0.626. Vendor patch APSB11-...

CVE-2012-2047

Affected software: Adobe Shockwave Player (before 11.6.6.636). Vulnerability: memory corruption that can allow arbitrary code execution or cause a denial of service via unspecified vectors (distinct from CVE-2012-2043, -2044, -2045, -2046). Root cause/impact: memory corruption leading to potentia...

CVE-2012-4174

Adobe Shockwave Player before 11.6.8.638 is vulnerable to CVE-2012-4174 due to a buffer overflow in Shockwave, allowing arbitrary code execution. Connected docs corroborate this family of vulnerabilities (including CVE-2012-4172/4173/4175/5273) and list affected versions; remediation guidance in ...

CVE-2012-5273

CVE-2012-5273 is listed with Adobe Shockwave Player vulnerabilities (Mac OS X and Windows). The connected sources confirm a buffer overflow vulnerability in Shockwave Player that can lead to arbitrary code execution, associated with versions around 11.x (noted as

CVE-2010-4084

Adobe Shockwave Player

CVE-2010-4194

Adobe Shockwave Player contains a vulnerability CVE-2010-4194 in the dirapi.dll module where input data is not properly validated. This can enable remote code execution via unspecified vectors on versions before 11.5.9.620. Mitigation: update to Shockwave Player 11.5.9.620 as described in APSB11-...

CVE-2011-0318

Adobe Shockwave Player (Mac OS X)

CVE-2011-0556

Adobe Shockwave Player (Windows/macOS) is affected by CVE-2011-0556 via the Font Xtra.x32 module. The vulnerability stems from parsing the PFR1 chunk where a 16-bit size value is sign-extended, enabling memory corruption and arbitrary code execution or a crash. Affected versions are before 11.5.9...

CVE-2011-2116

CVE-2011-2116 affects Adobe Shockwave Player; the vulnerability arises from parsing the Lnam chunk in Shockwave’s RIFF-based Director files, causing memory corruption in IML32.dll and enabling remote code execution. Affected product: Adobe Shockwave Player (IML32.dll). Impact: remote arbitrary co...

CVE-2011-2121

Adobe Shockwave Player is affected by CVE-2011-2121 due to an integer overflow in the AudioMixer.x32 module when parsing mixer structures from Director files. This can allow remote code execution under the user’s context, with exploitation requiring user interaction (per ZDI). Affected product/ve...

CVE-2011-2421

Adobe Shockwave Player contains a vulnerability CVE-2011-2421 in Dirapi.dll affecting versions before 11.6.1.629. A crafted .dir media file can lead to arbitrary code execution or memory corruption (potential DoS). Public references include Adobe APSB11-19 and related advisories; exploit/real-wor...

CVE-2011-2449

CVE-2011-2449 affects Adobe Shockwave Player's TextXtra module, with versions before 11.6.3.633 vulnerable to memory corruption that can enable arbitrary code execution or cause a denial of service. The vulnerability is present across affected builds (e.g., Windows and Mac OS X) and is tied to th...

CVE-2012-0758

CVE-2012-0758 is tied to a heap-based buffer overflow in Adobe Shockwave Player prior to version 11.6.4.634. The vulnerability could allow arbitrary code execution and is listed as a critical issue (Windows and macOS). Affected versions include Shockwave Player 11.6.3.633 and earlier, with exploi...

CVE-2013-3348

Adobe Shockwave Player is affected on multiple platforms by CVE-2013-3348. The vulnerability exists in versions before 12.0.3.133, with references to older builds (e.g., 12.0.2.122 and earlier) that can be exploited via a remote vector to cause memory corruption, enabling arbitrary code execution...

CVE-2010-2875

CVE-2010-2875 concerns an integer signedness error in Adobe Shockwave Player before 11.5.8.612, triggered while parsing the tSAC chunk in Adobe Director files. The signedness issue can cause memory corruption, enabling a remote attacker to cause a denial of service or execute arbitrary code. Affe...

CVE-2010-2879

Adobe Shockwave Player contains a CVE-2010-2879 vulnerability: an integer overflow in the TextXtra.x32 allocator can cause heap memory corruption, enabling remote code execution or a denial of service. Affected product/version: Shockwave Player before 11.5.8.612. Root cause: faulty heap allocatio...

CVE-2011-2419

CVE-2011-2419 affects Adobe Shockwave Player where the IML32.dll enables memory corruption leading to remote code execution (and DoS) for vulnerable versions. Public details in connected docs indicate the vulnerability spans Shockwave Player versions prior to 11.6.1.629, with advisories APSB11-19...

CVE-2012-2046

CVE-2012-2046 affects Adobe Shockwave Player before 11.6.6.636. The vulnerability enables arbitrary code execution or a denial of service (memory corruption) via unspecified vectors. The available connected documents corroborate that this is a memory‑corruption issue in Shockwave Player, not deta...

CVE-2013-0636

Adobe Shockwave Player is affected by CVE-2013-0636 (stack-based buffer overflow) and CVE-2013-0635 (memory corruption) with exploitation leading to arbitrary code execution. The vulnerability applies to Shockwave Player versions before 12.0.0.112, and per APSB13-06 also to Windows/macOS builds

CVE-2014-0505

Adobe Shockwave Player is vulnerable to a memory corruption issue leading to arbitrary code execution or DoS. Affected versions include 12.0.9.149 and earlier, with the issue being exploitable via a user-tricked playback of a malicious Shockwave file; the exact vectors are not specified in the pr...

CVE-2009-2186

Adobe Shockwave Player is affected by CVE-2009-2186, an unspecified vulnerability that allows remote code execution in versions before 11.0.0.465. The issue is related to an older vulnerability (CVE-2009-1860) which was previously resolved in 11.0.0.465. Affected product: Shockwave Player (Window...

CVE-2009-3244

CVE-2009-3244 is a heap-based buffer overflow in the SwDir.dll ActiveX control of Adobe Shockwave Player (11.5.1.601 and earlier). The overflow is triggered by a long PlayerVersion property, allowing a remote attacker to cause a denial of service and possibly execute arbitrary code. Affected plat...

CVE-2010-2869

Adobe Shockwave Player (IML32.dll) is affected by CVE-2010-2869 due to improper parsing of .dir files, causing memory corruption that can lead to denial of service or arbitrary code execution. A PoC file offset at 0x3712 demonstrates the issue. Vulnerable versions include Shockwave Player 11.5.7....

CVE-2010-2874

Adobe Shockwave Player is affected by CVE-2010-2874 (and related CVEs) due to memory corruption that could allow remote code execution. The issue affects Shockwave Player builds prior to 11.5.8.612 on Windows and Mac, with initial reports noting possible uninitialized-pointer or incorrect-pointer...

CVE-2010-2877

Adobe Shockwave Player is affected by CVE-2010-2877 (and related CVEs) where a Director movie count value is not properly validated, enabling heap memory corruption and potential code execution. Affected component paths include IML32X.dll and DIRAPIX.dll, with the vulnerability enabling remote co...

CVE-2010-4309

CVE-2010-4309 concerns Adobe Shockwave Player prior to 11.6.1.629, which is exposed to memory-corruption vulnerabilities that can lead to arbitrary code execution or a denial of service. The issue is tied to memory-corruption vulnerabilities in Shockwave Player, with multiple third‑party advisori...

CVE-2011-0317

Adobe Shockwave Player contains a vulnerability in Dirapi.dll (CVE-2011-0317) that allows arbitrary code execution or memory corruption. Affected products are Shockwave Player versions before 11.6.0.626 for Mac OS X (and related lines in the CVE list), with exploitation described as via unspecifi...

CVE-2011-2120

Adobe Shockwave Player contains an integer overflow in the CursorAsset x32 component that can lead to remote code execution. Affected are Shockwave Player versions before 11.6.0.626 (and earlier Mac OS X builds cited). Public advisories (APSB11-17) and the ZDI entry confirm this vulnerability cla...

CVE-2012-4175

Adobe Shockwave Player vulnerability CVE-2012-4175 (and related CVEs) affects before 11.6.8.638. A buffer overflow in Shockwave Player can allow arbitrary code execution via unspecified vectors. Connected sources (OpenVAS/Nessus plugins) confirm multiple vulnerabilities in Shockwave Player (Windo...

CVE-2012-4176

CVE-2012-4176 affects Adobe Shockwave Player prior to 11.6.8.638. An array index error in the plugin can allow remote arbitrary code execution. The vulnerability is triggered by processing a crafted Shockwave file, with no user interaction required in the referenced descriptions. The patched vers...

CVE-2013-1384

Adobe Shockwave Player versions before 12.0.2.122 are affected by CVE-2013-1384 and CVE-2013-1386 (and related advisories). The Red Hat entries corroborate that these flaws allow arbitrary code execution or memory corruption/DoS via unspecified vectors, with the CVEs distinguished from each other...

CVE-2014-0500

Adobe Shockwave Player is affected by multiple memory corruption vulnerabilities (CVE-2014-0500, CVE-2014-0501). The issues are triggered in Shockwave Player versions prior to 12.0.9.149 (various platforms; Mac OS X/Windows noted in connected sources). Root cause: memory corruption in the Shockwa...

CVE-2005-3525

CVE-2005-3525 corresponds to a stack-based buffer overflow in the Shockwave Player ActiveX installer (ActiveX control used to install Shockwave). The flaw exists in the installer ActiveX control and can be exploited by supplying crafted large values to two parameters, enabling remote code executi...

CVE-2009-3465

CVE-2009-3465 affects Adobe Shockwave Player prior to 11.5.2.602. An invalid pointer vulnerability in processing crafted Shockwave content can allow remote code execution via a web page. Impact is arbitrary code execution with network access and no user interaction required per the referenced adv...

CVE-2010-2882

Summary of CVE-2010-2882 (Adobe Shockwave Player) : Affected software is Shockwave Player for Windows and macOS (versions 11.5.7.609 and older). The vulnerability stems from how DIRAPI.dll parses .dir media files, leading to a memory corruption condition that can cause remote denial of service or...

CVE-2012-2044

Adobe Shockwave Player before 11.6.6.636 is vulnerable to a memory corruption flaw that can be exploited to execute arbitrary code or cause a denial of service via unspecified vectors. This CVE is described as a single vulnerability distinct from CVE-2012-2043 and CVE-2012-2045–2047 within the sa...

CVE-2009-4003

CVE-2009-4003 concerns multiple integer overflow vulnerabilities in Adobe Shockwave Player prior to 11.5.6.606, reported across several sources. The flaws occur during Shockwave processing (notably in 3D blocks) and can lead to heap memory corruption and potential remote code execution. Affected ...

CVE-2010-2878

Adobe Shockwave Player contains a DIRAPIX.dll flaw (CVE-2010-2878) where improper handling of a Director movie buffer seek leads to heap memory corruption, enabling remote code execution or crash. Affected product: Shockwave Player before 11.5.8.612. Attack requires a crafted movie; vendor adviso...

CVE-2010-4193

CVE-2010-4193 concerns Adobe Shockwave Player before 11.5.9.620, which does not properly validate unspecified input data, allowing attackers to execute arbitrary code via unknown vectors. Affected versions include 11.5.9.615 and earlier; Adobe APSB11-01 fixes this by upgrading to 11.5.9.620. Mult...

CVE-2011-2108

CVE-2011-2108 affects Adobe Shockwave Player prior to version 11.6.0.626. The vulnerability is described as an arbitrary code execution flaw due to a design flaw, with unspecified vectors. The issue is listed across multiple sources (NVD entry for CVE-2011-2108 and vulnerability references in Nes...