CVE-2013-0636

Adobe Shockwave Player is affected by CVE-2013-0636 (stack-based buffer overflow) and CVE-2013-0635 (memory corruption) with exploitation leading to arbitrary code execution. The vulnerability applies to Shockwave Player versions before 12.0.0.112, and per APSB13-06 also to Windows/macOS builds

CVE-2013-3348

Adobe Shockwave Player is affected on multiple platforms by CVE-2013-3348. The vulnerability exists in versions before 12.0.3.133, with references to older builds (e.g., 12.0.2.122 and earlier) that can be exploited via a remote vector to cause memory corruption, enabling arbitrary code execution...

CVE-2009-4002

Adobe Shockwave Player is affected by CVE-2009-4002 (buffer overflow in 3D model processing) in versions prior to 11.5.6.606. The vulnerability allows remote code execution and is discussed alongside CVE-2009-4003 (integer overflows) in multiple advisories. Affected software: Shockwave Player on ...

CVE-2010-0130

CVE-2010-0130 is an Adobe Shockwave Player integer overflow vulnerability disclosed for vulnerability in Shockwave Player prior to 11.5.7.609. The issue arises when processing Director (.dir) files, enabling remote code execution. Affected software: Adobe Shockwave Player (versions before 11.5.7....

CVE-2010-2875

CVE-2010-2875 concerns an integer signedness error in Adobe Shockwave Player before 11.5.8.612, triggered while parsing the tSAC chunk in Adobe Director files. The signedness issue can cause memory corruption, enabling a remote attacker to cause a denial of service or execute arbitrary code. Affe...

CVE-2010-2876

CVE-2010-2876 concerns Adobe Shockwave Player. The vulnerability lies in parsing a FFFFFF88 record in Director (.dir/.dcr) files, where values used to compute a heap buffer size are overflowed, leading to heap memory corruption and potential remote code execution. Affected product: Shockwave Play...

CVE-2010-2879

Adobe Shockwave Player contains a CVE-2010-2879 vulnerability: an integer overflow in the TextXtra.x32 allocator can cause heap memory corruption, enabling remote code execution or a denial of service. Affected product/version: Shockwave Player before 11.5.8.612. Root cause: faulty heap allocatio...

CVE-2010-4084

Adobe Shockwave Player

CVE-2010-4309

CVE-2010-4309 concerns Adobe Shockwave Player prior to 11.6.1.629, which is exposed to memory-corruption vulnerabilities that can lead to arbitrary code execution or a denial of service. The issue is tied to memory-corruption vulnerabilities in Shockwave Player, with multiple third‑party advisori...

CVE-2011-2113

CVE-2011-2113 affects Adobe Shockwave Player, specifically the Shockwave3DAsset component. It stems from buffer overflows/memory corruption in the Shockwave3DAsset/DEM X chunk handling, allowing arbitrary code execution. Affected product: Shockwave Player prior to 11.6.0.626. Vendor patch APSB11-...

CVE-2011-2117

Adobe Shockwave Player (pre-11.6.0.626) is affected by multiple memory corruption/unspecified-vulnerability defects that can lead to arbitrary code execution or memory corruption, including CVEs such as 2011-2117. The issues affect multiple components (e.g., Dirapi.dll, IML32.dll, Shockwave3DAsse...

CVE-2011-2421

Adobe Shockwave Player contains a vulnerability CVE-2011-2421 in Dirapi.dll affecting versions before 11.6.1.629. A crafted .dir media file can lead to arbitrary code execution or memory corruption (potential DoS). Public references include Adobe APSB11-19 and related advisories; exploit/real-wor...

CVE-2012-5273

CVE-2012-5273 is listed with Adobe Shockwave Player vulnerabilities (Mac OS X and Windows). The connected sources confirm a buffer overflow vulnerability in Shockwave Player that can lead to arbitrary code execution, associated with versions around 11.x (noted as

CVE-2014-0505

Adobe Shockwave Player is vulnerable to a memory corruption issue leading to arbitrary code execution or DoS. Affected versions include 12.0.9.149 and earlier, with the issue being exploitable via a user-tricked playback of a malicious Shockwave file; the exact vectors are not specified in the pr...

CVE-2005-3525

CVE-2005-3525 corresponds to a stack-based buffer overflow in the Shockwave Player ActiveX installer (ActiveX control used to install Shockwave). The flaw exists in the installer ActiveX control and can be exploited by supplying crafted large values to two parameters, enabling remote code executi...

CVE-2010-4308

CVE-2010-4308 (Adobe Shockwave Player) affects Shockwave Player versions prior to 11.6.1.629 on multiple platforms. The vulnerability is described as memory corruption that can lead to arbitrary code execution or a denial of service via unspecified vectors; the entry groups it with CVE-2010-4309 ...

CVE-2011-0318

Adobe Shockwave Player (Mac OS X)

CVE-2011-0320

Adobe Shockwave Player (Windows/macOS)

CVE-2012-2046

CVE-2012-2046 affects Adobe Shockwave Player before 11.6.6.636. The vulnerability enables arbitrary code execution or a denial of service (memory corruption) via unspecified vectors. The available connected documents corroborate that this is a memory‑corruption issue in Shockwave Player, not deta...

CVE-2012-4174

Adobe Shockwave Player before 11.6.8.638 is vulnerable to CVE-2012-4174 due to a buffer overflow in Shockwave, allowing arbitrary code execution. Connected docs corroborate this family of vulnerabilities (including CVE-2012-4172/4173/4175/5273) and list affected versions; remediation guidance in ...

CVE-2009-2186

Adobe Shockwave Player is affected by CVE-2009-2186, an unspecified vulnerability that allows remote code execution in versions before 11.0.0.465. The issue is related to an older vulnerability (CVE-2009-1860) which was previously resolved in 11.0.0.465. Affected product: Shockwave Player (Window...

CVE-2010-2589

CVE-2010-2589 : Integer overflow in the dirapi.dll of Adobe Shockwave Player (pre-11.5.9.620) can lead to arbitrary code execution. Affected versions include 11.5.9.615 and earlier. Remediation: upgrade to 11.5.9.620 per APSB11-01. "

CVE-2010-2874

Adobe Shockwave Player is affected by CVE-2010-2874 (and related CVEs) due to memory corruption that could allow remote code execution. The issue affects Shockwave Player builds prior to 11.5.8.612 on Windows and Mac, with initial reports noting possible uninitialized-pointer or incorrect-pointer...

CVE-2010-4092

Adobe Shockwave Player contains a Use-After-Free vulnerability (CVE-2010-4092) in an unspecified compatibility component related to the Settings window and an unloaded library. Affected software is Shockwave Player before version 11.5.9.620. The issue allows user-assisted remote code execution wh...

CVE-2010-4306

CVE-2010-4306 affects Adobe Shockwave Player prior to version 11.5.9.620. The vulnerability allows arbitrary code execution or a denial of service due to memory corruption via unspecified vectors. The entry notes multiple related CVEs and a high-severity impact (NVD base score 9.3). There are no ...

CVE-2011-2121

Adobe Shockwave Player is affected by CVE-2011-2121 due to an integer overflow in the AudioMixer.x32 module when parsing mixer structures from Director files. This can allow remote code execution under the user’s context, with exploitation requiring user interaction (per ZDI). Affected product/ve...

CVE-2011-2449

CVE-2011-2449 affects Adobe Shockwave Player's TextXtra module, with versions before 11.6.3.633 vulnerable to memory corruption that can enable arbitrary code execution or cause a denial of service. The vulnerability is present across affected builds (e.g., Windows and Mac OS X) and is tied to th...

CVE-2012-4175

Adobe Shockwave Player vulnerability CVE-2012-4175 (and related CVEs) affects before 11.6.8.638. A buffer overflow in Shockwave Player can allow arbitrary code execution via unspecified vectors. Connected sources (OpenVAS/Nessus plugins) confirm multiple vulnerabilities in Shockwave Player (Windo...

CVE-2014-0500

Adobe Shockwave Player is affected by multiple memory corruption vulnerabilities (CVE-2014-0500, CVE-2014-0501). The issues are triggered in Shockwave Player versions prior to 12.0.9.149 (various platforms; Mac OS X/Windows noted in connected sources). Root cause: memory corruption in the Shockwa...

CVE-2009-3244

CVE-2009-3244 is a heap-based buffer overflow in the SwDir.dll ActiveX control of Adobe Shockwave Player (11.5.1.601 and earlier). The overflow is triggered by a long PlayerVersion property, allowing a remote attacker to cause a denial of service and possibly execute arbitrary code. Affected plat...

CVE-2010-2882

Summary of CVE-2010-2882 (Adobe Shockwave Player) : Affected software is Shockwave Player for Windows and macOS (versions 11.5.7.609 and older). The vulnerability stems from how DIRAPI.dll parses .dir media files, leading to a memory corruption condition that can cause remote denial of service or...

CVE-2010-4187

Adobe Shockwave Player (pre-11.5.9.620) is affected by CVE-2010-4187 via malformed Director file chunks, enabling arbitrary code execution or memory corruption. This vulnerability is part of a broader set of issues in Shockwave Player (incl. CVEs 2010-2587/8/9, 2010-4092/3/4/5/6, 2011-0555/56/7) ...

CVE-2010-4194

Adobe Shockwave Player contains a vulnerability CVE-2010-4194 in the dirapi.dll module where input data is not properly validated. This can enable remote code execution via unspecified vectors on versions before 11.5.9.620. Mitigation: update to Shockwave Player 11.5.9.620 as described in APSB11-...

CVE-2011-0556

Adobe Shockwave Player (Windows/macOS) is affected by CVE-2011-0556 via the Font Xtra.x32 module. The vulnerability stems from parsing the PFR1 chunk where a 16-bit size value is sign-extended, enabling memory corruption and arbitrary code execution or a crash. Affected versions are before 11.5.9...

CVE-2011-2108

CVE-2011-2108 affects Adobe Shockwave Player prior to version 11.6.0.626. The vulnerability is described as an arbitrary code execution flaw due to a design flaw, with unspecified vectors. The issue is listed across multiple sources (NVD entry for CVE-2011-2108 and vulnerability references in Nes...

CVE-2011-2116

CVE-2011-2116 affects Adobe Shockwave Player; the vulnerability arises from parsing the Lnam chunk in Shockwave’s RIFF-based Director files, causing memory corruption in IML32.dll and enabling remote code execution. Affected product: Adobe Shockwave Player (IML32.dll). Impact: remote arbitrary co...

CVE-2012-2044

Adobe Shockwave Player before 11.6.6.636 is vulnerable to a memory corruption flaw that can be exploited to execute arbitrary code or cause a denial of service via unspecified vectors. This CVE is described as a single vulnerability distinct from CVE-2012-2043 and CVE-2012-2045–2047 within the sa...

CVE-2012-4172

Adobe Shockwave Player versions affected include

CVE-2012-4173

Adobe Shockwave Player before 11.6.8.638 is vulnerable to a buffer overflow that allows arbitrary code execution via unspecified vectors (CVE-2012-4172, CVE-2012-4173, CVE-2012-4174, CVE-2012-4175, CVE-2012-5273). Affected product: Shockwave Player (Windows/macOS) prior to the fixed build; base s...

CVE-2013-1384

Adobe Shockwave Player versions before 12.0.2.122 are affected by CVE-2013-1384 and CVE-2013-1386 (and related advisories). The Red Hat entries corroborate that these flaws allow arbitrary code execution or memory corruption/DoS via unspecified vectors, with the CVEs distinguished from each other...

CVE-2009-3465

CVE-2009-3465 affects Adobe Shockwave Player prior to 11.5.2.602. An invalid pointer vulnerability in processing crafted Shockwave content can allow remote code execution via a web page. Impact is arbitrary code execution with network access and no user interaction required per the referenced adv...

CVE-2009-4003

CVE-2009-4003 concerns multiple integer overflow vulnerabilities in Adobe Shockwave Player prior to 11.5.6.606, reported across several sources. The flaws occur during Shockwave processing (notably in 3D blocks) and can lead to heap memory corruption and potential remote code execution. Affected ...

CVE-2010-2878

Adobe Shockwave Player contains a DIRAPIX.dll flaw (CVE-2010-2878) where improper handling of a Director movie buffer seek leads to heap memory corruption, enabling remote code execution or crash. Affected product: Shockwave Player before 11.5.8.612. Attack requires a crafted movie; vendor adviso...

CVE-2011-2109

Adobe Shockwave Player contains multiple memory corruption and integer overflow vulnerabilities in Dirapi.dll that can lead to arbitrary code execution. CVE-2011-2109 is tied to multiple integer overflows in Dirapi.dll, with root cause in size/length handling during parsing (rcsL/Director file fo...

CVE-2011-2120

Adobe Shockwave Player contains an integer overflow in the CursorAsset x32 component that can lead to remote code execution. Affected are Shockwave Player versions before 11.6.0.626 (and earlier Mac OS X builds cited). Public advisories (APSB11-17) and the ZDI entry confirm this vulnerability cla...

CVE-2012-4176

CVE-2012-4176 affects Adobe Shockwave Player prior to 11.6.8.638. An array index error in the plugin can allow remote arbitrary code execution. The vulnerability is triggered by processing a crafted Shockwave file, with no user interaction required in the referenced descriptions. The patched vers...

CVE-2012-6271

Adobe Shockwave Player (Windows and Mac OS X) up to version 11.6.8.638 is affected by CVE-2012-6271: a Shockwave movie containing an Xtra URL can trigger installation of arbitrary signed Xtras, which can allow remote code execution. Root cause described in the CVE entry is the ability to install ...

CVE-2010-2871

CVE-2010-2871 : Adobe Shockwave Player before 11.5.8.612 contains an integer overflow in the 3D object handling that, during parsing of a 0xFFFFFF45 RIFF record in a Director movie, can lead to heap memory corruption and remote code execution or denial of service. The issue is documented across m...

CVE-2010-2881

Adobe Shockwave Player contains a memory-corruption vulnerability (CVE-2010-2881) in IML32.dll caused by improper parsing of .dir media files, enabling remote code execution or memory corruption. Impact states denial of service or arbitrary code execution via a malformed file (PoC at offset 0x24C...

CVE-2011-0317

Adobe Shockwave Player contains a vulnerability in Dirapi.dll (CVE-2011-0317) that allows arbitrary code execution or memory corruption. Affected products are Shockwave Player versions before 11.6.0.626 for Mac OS X (and related lines in the CVE list), with exploitation described as via unspecifi...