CVE-2012-2030

Adobe Shockwave Player (pre-11.6.5.635) is vulnerable to CVE-2012-2030 due to a memory corruption error when parsing rcsL RIFF chunks in DIR/DCR files, enabling remote code execution or a DoS. The issue is triggered by crafted Shockwave content and affects multiple OS/architectures; patches/relea...

CVE-2012-0759

CVE-2012-0759 concerns Adobe Shockwave Player. Connected sources specify that the vulnerability is in Shockwave Player before version 11.6.4.634, enabling attackers to execute arbitrary code or cause a denial of service via memory corruption through unspecified vectors (a separate issue from CVE-...

CVE-2009-1860

Adobe Shockwave Player is affected by CVE-2009-1860, a remote code execution vulnerability triggered by loading a crafted Adobe Director file. The issue affects Shockwave Player versions up to 11.5.0.596, with remediation provided by upgrading to 11.5.0.600 (Windows). The vulnerability enables co...

CVE-2007-5275

CVE-2007-5275 is an Adobe Flash Player plug-in issue affecting Flash 9 where a Flash movie can remotely induce the victim to establish TCP sessions to arbitrary hosts due to DNS rebinding-like behavior and insufficient hostname-IP pinning after processing cross-domain policy (allow-access-from). ...

CVE-2011-0555

CVE-2011-0555 affects Adobe Shockwave Player (TextXtra.x32). A crafted DEMX RIFF chunk in a Director file triggers incorrect buffer allocation during parsing, leading to remote code execution or heap memory corruption. Affected: Shockwave Player versions before 11.5.9.620. Mitigation: update to 1...

CVE-2010-2581

CVE-2010-2581 is a memory-corruption vulnerability in Adobe Shockwave Player affecting the DIRAPI.dll module. According to the provided sources, it is triggered by parsing a crafted Director file with a malformed pamm chunk (invalid size or sub-chunk count), leading to potential arbitrary code ex...

CVE-2010-1289

Technical details for CVE-2010-1289 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2010-1284

Adobe Shockwave Player affected: all builds prior to 11.5.7.609 are vulnerable to memory corruption and possible arbitrary code execution via unspecified vectors (CVE-2010-1284). Root cause: memory corruption in Shockwave processing. Impact: potential code execution or denial of service. Remediat...

CVE-2010-4086

CVE-2010-4086 affects Adobe Shockwave Player prior to 11.5.9.615. The vulnerability resides in the dirapi.dll component and is triggered by a crafted Director (.dir) media file with an invalid element size, leading to arbitrary code execution or memory corruption (also described as potential DoS)...

CVE-2012-0757

The CVE-2012-0757 issue concerns the Shockwave 3D Asset component in Adobe Shockwave Player prior to version 11.6.4.634, which is vulnerable to arbitrary code execution or memory corruption via unspecified vectors. Public references in Red Hat CVE records reiterate the same vulnerability as CVE-2...

CVE-2012-2029

Adobe Shockwave Player is affected by CVE-2012-2030/2031/2032/2033 due to a memory corruption error when parsing crafted DIR/DCR/RIFF chunks (rcsL) in Shockwave files. A remote attacker can exploit this by convincing a user to open a specially crafted file, potentially leading to arbitrary code e...

CVE-2011-2111

Adobe Shockwave Player (Windows/macOS) is affected by CVE-2011-2111 due to a memory-corruption vulnerability in IML32.dll triggered by malformed DEMX chunk GIF parsing. Exploitation can lead to arbitrary code execution or crash; vendor patch APSB11-17 addressed this in 11.6.0.626+. Connected advi...

CVE-2012-0764

The CVE-2012-0764 entry concerns the Shockwave 3D Asset component in Adobe Shockwave Player prior to 11.6.4.634, where memory corruption can lead to arbitrary code execution or DoS via unspecified vectors. The incident is tied to a family of similar Shockwave vulnerabilities (e.g., CVE-2012-0757,...

CVE-2012-0763

CVE-2012-0763 affects Adobe Shockwave Player, specifically the Shockwave 3D Asset component. The vulnerability allows arbitrary code execution or a denial of service via memory corruption in affected Shockwave Player versions prior to 11.6.4.634, with vectors unspecified in the provided documents...

CVE-2009-3464

CVE-2009-3464 affects Adobe Shockwave Player prior to 11.5.2.602. The vulnerability is described as an invalid pointer vulnerability in the processing of crafted Shockwave content, which could allow remote code execution. Some sources group this with multiple related issues under APSB09-16. The d...

CVE-2010-3655

CVE-2010-3655 affects Adobe Shockwave Player prior to 11.5.9.615, due to a stack-based buffer overflow in the DIRAPI.DLL when parsing Lnam chunk data, enabling arbitrary code execution. Affected software is Adobe Shockwave Player (plug-in), with vulnerable component in dirapi.dll. The issue is tr...

CVE-2010-1291

Technical details for CVE-2010-1291 are not publicly provided in the supplied documents; the Connected documents do not specify affected software versions, root cause, or remediation. Monitor for updates.

CVE-2010-2582

CVE-2010-2582 affects Adobe Shockwave Player (Windows/macOS) via a heap-based buffer overflow in the TextXtra.x32 DEMX chunk parsing, caused by a failure to reallocate a buffer to fit chunk data. Public docs consistently describe this as a vulnerability that allows remote code execution if a craf...

CVE-2013-1386

CVE-2013-1386 affects Adobe Shockwave Player prior to version 12.0.2.122. The Red Hat advisories and vulnerability listings describe an arbitrary code execution or memory corruption vulnerability via unspecified vectors (distinct from CVE-2013-1384). Affected component: Shockwave Player; impact: ...

CVE-2010-1287

Adobe Shockwave Player for Windows/macOS prior to 11.5.7.609 is affected by multiple memory corruption vulnerabilities, including CVE-2010-1287, that can cause denial of service or potentially allow arbitrary code execution via unspecified vectors. The vulnerability family is evidenced by multipl...

CVE-2010-2868

Adobe Shockwave Player contains a memory corruption/remote code execution risk due to IML32.dll failing to parse .dir files. A malformed .dir file (e.g., offset 0x320D) can cause memory corruption or code execution. Affected: Shockwave Player

CVE-2010-4188

CVE-2010-4188 affects Adobe Shockwave Player and involves a heap-based buffer overflow in the dirapi.dll module caused by processing a Director movie with an IFWV chunk size of 0. This can lead to remote code execution or memory corruption. The vulnerability is part of a set of issues in Shockwav...

CVE-2009-3463

CVE-2009-3463 affects Adobe Shockwave Player prior to 11.5.2.602, with an array index error that could allow remote code execution via crafted Shockwave content on a web site. The issue is part of APSB09-16 and is accompanied by related CVEs (3464–3466). The documented impact is arbitrary code ex...

CVE-2010-1292

CVE-2010-1292 affects Adobe Shockwave Player prior to 11.5.7.609. The vulnerability arises in the pami RIFF chunk parsing, where a value from a file is not validated before being used in file-pointer calculations, enabling a remote attacker to execute arbitrary code or cause memory corruption via...

CVE-2010-2587

Adobe Shockwave Player (dirapi.dll) is affected by CVE-2010-2587 and related CVEs due to a parsing flaw in the IFWV chunk size handling that can lead to memory corruption and potentially arbitrary code execution or a denial of service. Affected product/version: Shockwave Player prior to 11.5.9.62...

CVE-2011-0335

CVE-2011-0335 affects Adobe Shockwave Player and is tied to Dirapi.dll. The initial description states that before version 11.6.0.626, users could trigger arbitrary code execution or memory corruption via unspecified vectors, with possible DoS. Connected sources corroborate multiple CVEs in the s...

CVE-2011-2122

Adobe Shockwave Player (Dirapi.dll) is affected by CVE-2011-2122 before version 11.6.0.626, with memory corruption potentially leading to arbitrary code execution or denial of service via unspecified vectors related to rcsL substructures. This is one of several CVEs tied to Shockwave in the same ...

CVE-2012-0760

The CVE-2012-0760 entry concerns Adobe Shockwave Player’s Shockwave 3D Asset component, affected in versions prior to 11.6.4.634. The vulnerability allows arbitrary code execution or a denial of service due to memory corruption via unspecified vectors, as part of a family of Shockwave issues (sha...

CVE-2012-0761

Adobe Shockwave Player before 11.6.4.634 is affected by a vulnerability in the Shockwave 3D Asset component (CVE-2012-0761) that can lead to arbitrary code execution or a denial of service due to memory corruption via unspecified vectors. The Red Hat advisories reference the same family of vulner...

CVE-2010-1288

CVE-2010-1288 is a buffer overflow in Adobe Shockwave Player prior to version 11.5.7.609 that could allow arbitrary code execution via unspecified vectors. The vulnerability is part of a set of issues targeted by Adobe APSB10-12, affecting Shockwave Player 11.5.6.606 and earlier on Windows and ma...

CVE-2010-2880

Adobe Shockwave Player is affected by CVE-2010-2880 where DIRAPI.dll fails to parse .dir files, enabling memory corruption that can cause a denial of service or allow arbitrary code execution via a malformed file with an invalid value. Affected version: Shockwave Player before 11.5.8.612. The ava...

CVE-2010-4089

CVE-2010-4089 affects Adobe Shockwave Player, where IML32.dll can memory-corrupt via a crafted .dir file containing duplicated LCSM entries in an mmap record. This enables arbitrary code execution or a denial of service. Affected versions are Shockwave Player prior to 11.5.9.615. Remediation: upg...

CVE-2010-4195

Adobe Shockwave Player TextXtra.x32 DEMUX parsing path (TextXtra module) before 11.5.9.620 contains an input validation flaw that can lead to remote arbitrary code execution when processing unspecified input data. Details indicate multiple CVEs (including CVE-2010-4195) under APSB11-01; exact vec...

CVE-2012-0762

CVE-2012-0762 affects the Shockwave 3D Asset component in Adobe Shockwave Player; prior to version 11.6.4.634, it allows attackers to execute arbitrary code or cause memory corruption/DoS via unspecified vectors. This is documented in Red Hat CVEs list as part of a family to CVE-2012-0757/0760/07...

CVE-2009-3466

CVE-2009-3466 affects Adobe Shockwave Player and is described as a memory corruption issue related to an invalid string length, allowing remote code execution via a crafted web page. Affected versions are before 11.5.2.602. The vulnerability is fixed by upgrading to Shockwave Player 11.5.2.602. O...

CVE-2010-1286

Adobe Shockwave Player prior to 11.5.7.609 is affected by multiple vulnerabilities including CVE-2010-1286, described as memory corruption that could lead to denial of service or potentially arbitrary code execution via unspecified vectors. The CVE set is associated with Shockwave versions up to ...

CVE-2010-2865

Adobe Shockwave Player prior to 11.5.8.612 is affected by CVE-2010-2865, a denial-of-service vulnerability reported in APSB10-20. The issue is described as an unspecified DoS via unknown vectors, with the macro summary indicating memory-related issues across Shockwave components. The advisory not...

CVE-2010-2870

Adobe Shockwave Player (DIRAPIX.dll) up to version 11.5.8.612 is vulnerable due to improper validation of a chunk size in the mmap chunk of Director movies, enabling remote code execution or heap memory corruption. The flaw resides in the RIFF-based Director file format parsing within the DIRAPIX...

CVE-2010-4085

CVE-2010-4085 affects Adobe Shockwave Player (dirapi.dll) prior to version 11.5.9.615. The vulnerability is a memory corruption issue that can lead to arbitrary code execution or a denial of service via unspecified vectors. Affected software: Adobe Shockwave Player (Windows/macOS) with the vulner...

CVE-2010-4191

Adobe Shockwave Player is affected by multiple remote code execution and memory corruption vulnerabilities (CVE-2010-2587/2588/2589, 2010-4092/4093/4187/4190/4191/4192/4306/4194/4195/4196, 2011-0555/0556/0557/0569, among others) tied to the dirapi.dll and related components. The consolidated advi...

CVE-2012-2032

Adobe Shockwave Player is affected by multiple memory-corruption/remote code-execution vulnerabilities tracked as CVE-2012-2030 to CVE-2012-2033. The connected advisories attribute the issue to a parsing error in the DIR/DCR RIFF-like data within Shockwave files (rcsL chunk), which can be trigger...

CVE-2012-2047

Affected software: Adobe Shockwave Player (before 11.6.6.636). Vulnerability: memory corruption that can allow arbitrary code execution or cause a denial of service via unspecified vectors (distinct from CVE-2012-2043, -2044, -2045, -2046). Root cause/impact: memory corruption leading to potentia...

CVE-2010-2588

Adobe Shockwave Player

CVE-2010-2863

Adobe Shockwave Player before 11.5.8.612 is affected by memory corruption vulnerabilities (e.g., CVE-2010-2863) that could allow denial of service or arbitrary code execution via unspecified vectors. Affected versions include 11.5.7.609 and earlier on Windows/Mac, with multiple related CVEs (e.g....

CVE-2010-4189

Adobe Shockwave Player contains a vulnerability in the IML32 module used when parsing GIFs within Director movies. A crafted GIF image with a manipulated global color table size triggers an out-of-range pointer offset, enabling memory corruption and potentially arbitrary code execution or a denia...

CVE-2011-2112

Adobe Shockwave Player (Windows/macOS) is affected by CVE-2011-2112 due to multiple buffer overflows in IML32.dll. This can allow remote code execution and requires exploitation of unspecified vectors. Affected versions are before 11.6.0.626; patching to 11.6.0.626 (or newer) is the remediation s...

CVE-2011-2446

CVE-2011-2446 affects Adobe Shockwave Player’s DIRAPI.dll (before 11.6.3.633). The issue is a memory corruption/arbitrary code execution vulnerability via unspecified vectors in the Shockwave Player, as part of the Nov 2011 set of vulnerabilities (APSB11-27). Connected sources corroborate multipl...

CVE-2012-0766

Adobe Shockwave Player prior to 11.6.4.634 is affected by a vulnerability in the Shockwave 3D Asset component leading to arbitrary code execution or memory corruption. The issue is described across CVE-2012-0766 and related entries (CVE-2012-0757, 0760, 0761, 0762, 0763, 0764); Red Hat advisories...

CVE-2010-2872

Adobe Shockwave Player (Windows/macOS) prior to 11.5.8.612 is affected by CVE-2010-2872, a memory-corruption vulnerability in the Director pami RIFF chunk offset parsing that can lead to remote code execution or a denial of service when a crafted DIR/movie is opened. Root cause: improper validati...

CVE-2010-2879

Adobe Shockwave Player contains a CVE-2010-2879 vulnerability: an integer overflow in the TextXtra.x32 allocator can cause heap memory corruption, enabling remote code execution or a denial of service. Affected product/version: Shockwave Player before 11.5.8.612. Root cause: faulty heap allocatio...