CVE-2011-2115

CVE-2011-2115 affects Adobe Shockwave Player; the IML32.dll memory corruption vulnerability is triggered by crafted tSAC chunks, causing a heap-based buffer overflow that can lead to arbitrary code execution or a denial of service. Affected products are Adobe Shockwave Player versions older than ...

CVE-2011-2419

CVE-2011-2419 affects Adobe Shockwave Player where the IML32.dll enables memory corruption leading to remote code execution (and DoS) for vulnerable versions. Public details in connected docs indicate the vulnerability spans Shockwave Player versions prior to 11.6.1.629, with advisories APSB11-19...

CVE-2012-0758

CVE-2012-0758 is tied to a heap-based buffer overflow in Adobe Shockwave Player prior to version 11.6.4.634. The vulnerability could allow arbitrary code execution and is listed as a critical issue (Windows and macOS). Affected versions include Shockwave Player 11.6.3.633 and earlier, with exploi...

CVE-2013-5334

Adobe Shockwave Player is affected by CVE-2013-5334 (and is distinct from CVE-2013-5333). Affected versions are before 12.0.7.148. The issue is a memory corruption vulnerability that can allow remote code execution or cause a denial of service. The vulnerability is documented in APSB13-29; patche...

CVE-2010-4193

CVE-2010-4193 concerns Adobe Shockwave Player before 11.5.9.620, which does not properly validate unspecified input data, allowing attackers to execute arbitrary code via unknown vectors. Affected versions include 11.5.9.615 and earlier; Adobe APSB11-01 fixes this by upgrading to 11.5.9.620. Mult...

CVE-2011-2447

Adobe Shockwave Player (Mac OS X/Windows) prior to 11.6.3.633 is affected by multiple memory corruption vulnerabilities (CVE-2011-2446, -2447, -2448, -2449) that can allow arbitrary code execution or a denial of service. A remote attacker could exploit these by convincing a user to open a malicio...

CVE-2013-1385

CVE-2013-1385 affects Adobe Shockwave Player prior to 12.0.2.122. The vulnerability allows access to address information that can be used to bypass ASLR, via unspecified vectors. Affected product is Adobe Shockwave Player; root cause is failure to prevent leakage of address information, enabling ...

CVE-2011-2124

Adobe Shockwave Player before 11.6.0.626 is affected by CVE-2011-2124, a memory corruption vulnerability that can allow arbitrary code execution or cause a denial of service via unspecified vectors. The vulnerability is part of a broader set of issues affecting Shockwave, with multiple CVEs liste...

CVE-2011-2448

CVE-2011-2448 affects Adobe Shockwave Player (DIRAPI) prior to version 11.6.3.633. The issue stems from DIRAPI during Director File parsing leading to memory corruption, with potential arbitrary code execution or denial of service. Affected versions 11.6.1.629 and earlier are referenced in CAL en...

CVE-2011-2126

Adobe Shockwave Player is affected by CVE-2011-2126 (buffer overflow) with impact described as arbitrary code execution via unspecified vectors. The connected Nessus/OpenVAS details indicate affected versions are Shockwave Player up to 11.5.9.620, and the issue is addressed by upgrading to versio...

CVE-2011-2422

CVE-2011-2422 — Adobe Shockwave Player is affected by memory corruption and remote code execution via Textra.x32 in Shockwave Player before 11.6.1.629. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service through unspecified vectors. Affected software: ...

CVE-2013-3360

Adobe Shockwave Player is affected by CVE-2013-3360: pre-12.0.4.144 versions are vulnerable to memory corruption that can allow arbitrary code execution or a denial of service via unspecified vectors. Red Hat advisories confirm this vulnerability identity and impact. The available sources do not ...

CVE-2011-2128

Adobe Shockwave Player is affected by CVE-2011-2128 as part of a set of memory‑corruption vulnerabilities that can lead to arbitrary code execution. The ZDI advisory ZDI-11-221 describes remote code execution via the Shockwave 3D Asset.x32 vector (and notes user interaction is required), and the ...

CVE-2011-2420

CVE-2011-2420 concerns Adobe Shockwave Player, with versions prior to 11.6.1.629 vulnerable to multiple memory corruption issues that can allow remote code execution or a denial of service. The core vector is not specified in the provided description, but multiple connected sources reiterate memo...

CVE-2013-3359

CVE-2013-3359 concerns Adobe Shockwave Player before 12.0.4.144. The connected Red Hat entries and OpenVAS/NVD references describe a memory-corruption/vector-based vulnerability that can allow arbitrary code execution or a denial of service when processing content via unspecified vectors. Affecte...

CVE-2010-4196

Adobe Shockwave Player contains a vulnerability in the 3D Asset module where input data is not properly validated, enabling arbitrary code execution. Affected product/version: Shockwave Player before 11.5.9.620 (Windows/Mac). Root cause: improper validation in the 3D Assets handling. Impact: remo...

CVE-2010-4307

Adobe Shockwave Player (Windows/macOS) prior to 11.5.9.620 is affected by CVE-2010-4307 and related vulnerabilities in the Shockwave dirapi.dll and other components, enabling arbitrary code execution on successful exploitation. The public advisories (APSB11-01) state that updating to 11.5.9.620 m...

CVE-2011-0557

Adobe Shockwave Player is vulnerable to remote code execution via integer overflow in the 3D Assets record type 0xFFFFFF45 when parsing Director movies with a large count value. Affected versions are Shockwave Player prior to 11.5.9.620 (APSB11-01). The issue can lead to arbitrary code execution ...

CVE-2011-0569

The CVE-2011-0569 entry concerns Adobe Shockwave Player’s Font Xtra.x32 module. The vulnerability arises in the PFR1 chunk parsing when a 16-bit size value is sign-extended and used in a copy loop, leading to a buffer overflow that can enable arbitrary code execution or memory corruption. Affecte...

CVE-2011-2127

Adobe Shockwave Player before 11.6.0.626 is affected by CVE-2011-2127, which can cause arbitrary code execution or a denial of service via memory corruption through unspecified vectors. The entry is linked with related CVEs in the same family and has high severity (CVSS v2 9.3). The provided docu...

CVE-2011-2423

CVE-2011-2423 affects Adobe Shockwave Player (Windows/macOS) where msvcr90.dll in versions prior to 11.6.1.629 allows remote attackers to execute arbitrary code or cause a denial of service via memory corruption. The connected documents corroborate multiple memory-corruption vulnerabilities in Sh...

CVE-2011-2125

CVE-2011-2125 is a buffer overflow in Dirapix.dll of Adobe Shockwave Player prior to 11.6.0.626 that allows arbitrary code execution via unspecified vectors. Affected product: Shockwave Player; root cause: Dirapix.dll buffer overflow; impact: arbitrary code execution; remediation: update to 11.6....

CVE-2012-2033

Adobe Shockwave Player is affected by memory corruption vulnerabilities in parsing DIR/DCR files (rcsL chunk); CVE-2012-2031 and related CVEs (including CVE-2012-2030, CVE-2012-2032, CVE-2012-2033) enable remote code execution or denial of service. The issues arise in Shockwave Player before 11.6...

CVE-2011-2118

Adobe Shockwave Player is affected by CVE-2011-2118 due to an input-validation vulnerability in the FLV Asset Xtra component, prior to version 11.6.0.626. This vulnerability enables arbitrary code execution. Multiple connected advisories confirm the issue and reference the targeted Shockwave comp...