CVE-2009-3244

CVE-2009-3244 is a heap-based buffer overflow in the SwDir.dll ActiveX control of Adobe Shockwave Player (11.5.1.601 and earlier). The overflow is triggered by a long PlayerVersion property, allowing a remote attacker to cause a denial of service and possibly execute arbitrary code. Affected plat...

CVE-2011-2115

CVE-2011-2115 affects Adobe Shockwave Player; the IML32.dll memory corruption vulnerability is triggered by crafted tSAC chunks, causing a heap-based buffer overflow that can lead to arbitrary code execution or a denial of service. Affected products are Adobe Shockwave Player versions older than ...

CVE-2011-2420

CVE-2011-2420 concerns Adobe Shockwave Player, with versions prior to 11.6.1.629 vulnerable to multiple memory corruption issues that can allow remote code execution or a denial of service. The core vector is not specified in the provided description, but multiple connected sources reiterate memo...

CVE-2011-2449

CVE-2011-2449 affects Adobe Shockwave Player's TextXtra module, with versions before 11.6.3.633 vulnerable to memory corruption that can enable arbitrary code execution or cause a denial of service. The vulnerability is present across affected builds (e.g., Windows and Mac OS X) and is tied to th...

CVE-2012-6271

Adobe Shockwave Player (Windows and Mac OS X) up to version 11.6.8.638 is affected by CVE-2012-6271: a Shockwave movie containing an Xtra URL can trigger installation of arbitrary signed Xtras, which can allow remote code execution. Root cause described in the CVE entry is the ability to install ...

CVE-2010-2881

Adobe Shockwave Player contains a memory-corruption vulnerability (CVE-2010-2881) in IML32.dll caused by improper parsing of .dir media files, enabling remote code execution or memory corruption. Impact states denial of service or arbitrary code execution via a malformed file (PoC at offset 0x24C...

CVE-2011-0318

Adobe Shockwave Player (Mac OS X)

CVE-2011-2126

Adobe Shockwave Player is affected by CVE-2011-2126 (buffer overflow) with impact described as arbitrary code execution via unspecified vectors. The connected Nessus/OpenVAS details indicate affected versions are Shockwave Player up to 11.5.9.620, and the issue is addressed by upgrading to versio...

CVE-2011-2423

CVE-2011-2423 affects Adobe Shockwave Player (Windows/macOS) where msvcr90.dll in versions prior to 11.6.1.629 allows remote attackers to execute arbitrary code or cause a denial of service via memory corruption. The connected documents corroborate multiple memory-corruption vulnerabilities in Sh...

CVE-2011-2447

Adobe Shockwave Player (Mac OS X/Windows) prior to 11.6.3.633 is affected by multiple memory corruption vulnerabilities (CVE-2011-2446, -2447, -2448, -2449) that can allow arbitrary code execution or a denial of service. A remote attacker could exploit these by convincing a user to open a malicio...

CVE-2013-1385

CVE-2013-1385 affects Adobe Shockwave Player prior to 12.0.2.122. The vulnerability allows access to address information that can be used to bypass ASLR, via unspecified vectors. Affected product is Adobe Shockwave Player; root cause is failure to prevent leakage of address information, enabling ...

CVE-2013-3360

Adobe Shockwave Player is affected by CVE-2013-3360: pre-12.0.4.144 versions are vulnerable to memory corruption that can allow arbitrary code execution or a denial of service via unspecified vectors. Red Hat advisories confirm this vulnerability identity and impact. The available sources do not ...

CVE-2010-4307

Adobe Shockwave Player (Windows/macOS) prior to 11.5.9.620 is affected by CVE-2010-4307 and related vulnerabilities in the Shockwave dirapi.dll and other components, enabling arbitrary code execution on successful exploitation. The public advisories (APSB11-01) state that updating to 11.5.9.620 m...

CVE-2011-0557

Adobe Shockwave Player is vulnerable to remote code execution via integer overflow in the 3D Assets record type 0xFFFFFF45 when parsing Director movies with a large count value. Affected versions are Shockwave Player prior to 11.5.9.620 (APSB11-01). The issue can lead to arbitrary code execution ...

CVE-2011-2125

CVE-2011-2125 is a buffer overflow in Dirapix.dll of Adobe Shockwave Player prior to 11.6.0.626 that allows arbitrary code execution via unspecified vectors. Affected product: Shockwave Player; root cause: Dirapix.dll buffer overflow; impact: arbitrary code execution; remediation: update to 11.6....

CVE-2011-2422

CVE-2011-2422 — Adobe Shockwave Player is affected by memory corruption and remote code execution via Textra.x32 in Shockwave Player before 11.6.1.629. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service through unspecified vectors. Affected software: ...

CVE-2011-2448

CVE-2011-2448 affects Adobe Shockwave Player (DIRAPI) prior to version 11.6.3.633. The issue stems from DIRAPI during Director File parsing leading to memory corruption, with potential arbitrary code execution or denial of service. Affected versions 11.6.1.629 and earlier are referenced in CAL en...

CVE-2011-0569

The CVE-2011-0569 entry concerns Adobe Shockwave Player’s Font Xtra.x32 module. The vulnerability arises in the PFR1 chunk parsing when a 16-bit size value is sign-extended and used in a copy loop, leading to a buffer overflow that can enable arbitrary code execution or memory corruption. Affecte...

CVE-2011-2127

Adobe Shockwave Player before 11.6.0.626 is affected by CVE-2011-2127, which can cause arbitrary code execution or a denial of service via memory corruption through unspecified vectors. The entry is linked with related CVEs in the same family and has high severity (CVSS v2 9.3). The provided docu...

CVE-2010-4196

Adobe Shockwave Player contains a vulnerability in the 3D Asset module where input data is not properly validated, enabling arbitrary code execution. Affected product/version: Shockwave Player before 11.5.9.620 (Windows/Mac). Root cause: improper validation in the 3D Assets handling. Impact: remo...

CVE-2012-2033

Adobe Shockwave Player is affected by memory corruption vulnerabilities in parsing DIR/DCR files (rcsL chunk); CVE-2012-2031 and related CVEs (including CVE-2012-2030, CVE-2012-2032, CVE-2012-2033) enable remote code execution or denial of service. The issues arise in Shockwave Player before 11.6...

CVE-2013-3359

CVE-2013-3359 concerns Adobe Shockwave Player before 12.0.4.144. The connected Red Hat entries and OpenVAS/NVD references describe a memory-corruption/vector-based vulnerability that can allow arbitrary code execution or a denial of service when processing content via unspecified vectors. Affecte...

CVE-2011-2118

Adobe Shockwave Player is affected by CVE-2011-2118 due to an input-validation vulnerability in the FLV Asset Xtra component, prior to version 11.6.0.626. This vulnerability enables arbitrary code execution. Multiple connected advisories confirm the issue and reference the targeted Shockwave comp...

CVE-2011-2128

Adobe Shockwave Player is affected by CVE-2011-2128 as part of a set of memory‑corruption vulnerabilities that can lead to arbitrary code execution. The ZDI advisory ZDI-11-221 describes remote code execution via the Shockwave 3D Asset.x32 vector (and notes user interaction is required), and the ...