CVE-2012-2030

Adobe Shockwave Player (pre-11.6.5.635) is vulnerable to CVE-2012-2030 due to a memory corruption error when parsing rcsL RIFF chunks in DIR/DCR files, enabling remote code execution or a DoS. The issue is triggered by crafted Shockwave content and affects multiple OS/architectures; patches/relea...

CVE-2012-0771

Technical details about CVE-2012-0771 are not provided in the supplied documents. The connected entries reference related items but do not describe affected products, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2010-1280

Adobe Shockwave Player is affected by CVE-2010-1280: versions prior to 11.5.7.609 are vulnerable to remote code execution or memory corruption when processing specially crafted .dir files due to an erroneous dereference and a specific Shock.dir file. Affected product: Adobe Shockwave Player. Root...

CVE-2010-1282

Adobe Shockwave Player (Windows/macOS; prior to 11.5.7.609) is vulnerable due to parsing a specially crafted Director (.dir) file; a crafted ATOM size can trigger an infinite loop and high CPU usage, causing remote denial of service. Multiple connected sources corroborate CVE-2010-1282 and relate...

CVE-2010-1281

CVE-2010-1281 affects Adobe Shockwave Player (pre-11.5.7.609). The vulnerability is in iml32.dll where a value read from a file used in Director file-pointer calculations is not validated, enabling remote code execution or memory corruption via a crafted .dir file. Exploitation requires user inte...

CVE-2012-2029

Adobe Shockwave Player is affected by CVE-2012-2030/2031/2032/2033 due to a memory corruption error when parsing crafted DIR/DCR/RIFF chunks (rcsL) in Shockwave files. A remote attacker can exploit this by convincing a user to open a specially crafted file, potentially leading to arbitrary code e...

CVE-2010-0129

Adobe Shockwave Player is affected by CVE-2010-0129 due to multiple integer overflows leading to memory corruption via specially crafted Director (.dir) files. The vulnerability affects Shockwave Player prior to 11.5.7.609 and can enable remote memory corruption or potential arbitrary code execut...

CVE-2010-0986

Adobe Shockwave Player is affected by CVE-2010-0986 (asset entry processing issue) leading to memory corruption and possible arbitrary code execution. The vulnerability affects Shockwave Player prior to version 11.5.7.609. Secunia’s advisory notes remediation to update to 11.5.7.609. Other source...

CVE-2012-2031

Adobe Shockwave Player (Windows/macOS) has a memory corruption vulnerability (CVE-2012-2031) in parsing the rcsL DIR/DCR chunk of OBJ/RIF data, described as a remote code execution flaw when a user opens a crafted DIR/DCR file. The advisory notes that a remote attacker could execute arbitrary cod...

CVE-2013-5333

Affected product: Adobe Shockwave Player prior to 12.0.7.148. The vulnerability (CVE-2013-5333) is a memory corruption issue that can allow remote code execution or a denial of service via unspecified vectors. The issue is fixed in patched versions released with APSB13-29 (Adobe Security Update f...

CVE-2010-0987

Adobe Shockwave Player contains a heap-based buffer overflow (CVE-2010-0987) exploitable via crafted embedded fonts in Shockwave files. Affected product: Shockwave Player before version 11.5.7.609. Connected sources corroborate the vulnerability as part of multiple font-related shocks and describ...

CVE-2007-5941

The CVE-2007-5941 issue is a stack-based buffer overflow in the SWCtl.SWCtl ActiveX control of Adobe Shockwave. The vulnerability allows remote attackers to cause a denial of service and potentially execute arbitrary code via a long argument to the ShockwaveVersion method. Connected documents con...

CVE-2012-2032

Adobe Shockwave Player is affected by multiple memory-corruption/remote code-execution vulnerabilities tracked as CVE-2012-2030 to CVE-2012-2033. The connected advisories attribute the issue to a parsing error in the DIR/DCR RIFF-like data within Shockwave files (rcsL chunk), which can be trigger...

CVE-2010-0127

Adobe Shockwave Player is affected by CVE-2010-0127 (and related CVEs) up to version 11.5.6.606. The root cause is memory corruption triggered by crafted FFFFFF45h Shockwave 3D blocks in Shockwave files, leading to remote code execution or denial of service. The Mac OS X and Windows vulnerabiliti...

CVE-2010-1283

Adobe Shockwave Player before 11.5.7.609 is affected by CVE-2010-1283 due to a memory corruption flaw while parsing 3D blocks in Director (.dir) files (0xFFFFFF49). Exploitation could allow remote code execution or cause a denial of service. Affected product: Adobe Shockwave Player. Remediation: ...

CVE-2010-0130

CVE-2010-0130 is an Adobe Shockwave Player integer overflow vulnerability disclosed for vulnerability in Shockwave Player prior to 11.5.7.609. The issue arises when processing Director (.dir) files, enabling remote code execution. Affected software: Adobe Shockwave Player (versions before 11.5.7....

CVE-2013-5334

Adobe Shockwave Player is affected by CVE-2013-5334 (and is distinct from CVE-2013-5333). Affected versions are before 12.0.7.148. The issue is a memory corruption vulnerability that can allow remote code execution or cause a denial of service. The vulnerability is documented in APSB13-29; patche...

CVE-2012-2033

Adobe Shockwave Player is affected by memory corruption vulnerabilities in parsing DIR/DCR files (rcsL chunk); CVE-2012-2031 and related CVEs (including CVE-2012-2030, CVE-2012-2032, CVE-2012-2033) enable remote code execution or denial of service. The issues arise in Shockwave Player before 11.6...