CVE-2012-2030

Adobe Shockwave Player (pre-11.6.5.635) is vulnerable to CVE-2012-2030 due to a memory corruption error when parsing rcsL RIFF chunks in DIR/DCR files, enabling remote code execution or a DoS. The issue is triggered by crafted Shockwave content and affects multiple OS/architectures; patches/relea...

CVE-2012-0759

CVE-2012-0759 concerns Adobe Shockwave Player. Connected sources specify that the vulnerability is in Shockwave Player before version 11.6.4.634, enabling attackers to execute arbitrary code or cause a denial of service via memory corruption through unspecified vectors (a separate issue from CVE-...

CVE-2007-5275

CVE-2007-5275 is an Adobe Flash Player plug-in issue affecting Flash 9 where a Flash movie can remotely induce the victim to establish TCP sessions to arbitrary hosts due to DNS rebinding-like behavior and insufficient hostname-IP pinning after processing cross-domain policy (allow-access-from). ...

CVE-2009-1860

Adobe Shockwave Player is affected by CVE-2009-1860, a remote code execution vulnerability triggered by loading a crafted Adobe Director file. The issue affects Shockwave Player versions up to 11.5.0.596, with remediation provided by upgrading to 11.5.0.600 (Windows). The vulnerability enables co...

CVE-2013-1386

CVE-2013-1386 affects Adobe Shockwave Player prior to version 12.0.2.122. The Red Hat advisories and vulnerability listings describe an arbitrary code execution or memory corruption vulnerability via unspecified vectors (distinct from CVE-2013-1384). Affected component: Shockwave Player; impact: ...

CVE-2010-4086

CVE-2010-4086 affects Adobe Shockwave Player prior to 11.5.9.615. The vulnerability resides in the dirapi.dll component and is triggered by a crafted Director (.dir) media file with an invalid element size, leading to arbitrary code execution or memory corruption (also described as potential DoS)...

CVE-2010-2880

Adobe Shockwave Player is affected by CVE-2010-2880 where DIRAPI.dll fails to parse .dir files, enabling memory corruption that can cause a denial of service or allow arbitrary code execution via a malformed file with an invalid value. Affected version: Shockwave Player before 11.5.8.612. The ava...

CVE-2011-2111

Adobe Shockwave Player (Windows/macOS) is affected by CVE-2011-2111 due to a memory-corruption vulnerability in IML32.dll triggered by malformed DEMX chunk GIF parsing. Exploitation can lead to arbitrary code execution or crash; vendor patch APSB11-17 addressed this in 11.6.0.626+. Connected advi...

CVE-2010-2581

CVE-2010-2581 is a memory-corruption vulnerability in Adobe Shockwave Player affecting the DIRAPI.dll module. According to the provided sources, it is triggered by parsing a crafted Director file with a malformed pamm chunk (invalid size or sub-chunk count), leading to potential arbitrary code ex...

CVE-2010-2587

Adobe Shockwave Player (dirapi.dll) is affected by CVE-2010-2587 and related CVEs due to a parsing flaw in the IFWV chunk size handling that can lead to memory corruption and potentially arbitrary code execution or a denial of service. Affected product/version: Shockwave Player prior to 11.5.9.62...

CVE-2011-0555

CVE-2011-0555 affects Adobe Shockwave Player (TextXtra.x32). A crafted DEMX RIFF chunk in a Director file triggers incorrect buffer allocation during parsing, leading to remote code execution or heap memory corruption. Affected: Shockwave Player versions before 11.5.9.620. Mitigation: update to 1...

CVE-2012-0763

CVE-2012-0763 affects Adobe Shockwave Player, specifically the Shockwave 3D Asset component. The vulnerability allows arbitrary code execution or a denial of service via memory corruption in affected Shockwave Player versions prior to 11.6.4.634, with vectors unspecified in the provided documents...

CVE-2010-3655

CVE-2010-3655 affects Adobe Shockwave Player prior to 11.5.9.615, due to a stack-based buffer overflow in the DIRAPI.DLL when parsing Lnam chunk data, enabling arbitrary code execution. Affected software is Adobe Shockwave Player (plug-in), with vulnerable component in dirapi.dll. The issue is tr...

CVE-2010-4188

CVE-2010-4188 affects Adobe Shockwave Player and involves a heap-based buffer overflow in the dirapi.dll module caused by processing a Director movie with an IFWV chunk size of 0. This can lead to remote code execution or memory corruption. The vulnerability is part of a set of issues in Shockwav...

CVE-2012-0764

The CVE-2012-0764 entry concerns the Shockwave 3D Asset component in Adobe Shockwave Player prior to 11.6.4.634, where memory corruption can lead to arbitrary code execution or DoS via unspecified vectors. The incident is tied to a family of similar Shockwave vulnerabilities (e.g., CVE-2012-0757,...

CVE-2012-0757

The CVE-2012-0757 issue concerns the Shockwave 3D Asset component in Adobe Shockwave Player prior to version 11.6.4.634, which is vulnerable to arbitrary code execution or memory corruption via unspecified vectors. Public references in Red Hat CVE records reiterate the same vulnerability as CVE-2...

CVE-2010-1284

Adobe Shockwave Player affected: all builds prior to 11.5.7.609 are vulnerable to memory corruption and possible arbitrary code execution via unspecified vectors (CVE-2010-1284). Root cause: memory corruption in Shockwave processing. Impact: potential code execution or denial of service. Remediat...

CVE-2010-1289

Technical details for CVE-2010-1289 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2010-1292

CVE-2010-1292 affects Adobe Shockwave Player prior to 11.5.7.609. The vulnerability arises in the pami RIFF chunk parsing, where a value from a file is not validated before being used in file-pointer calculations, enabling a remote attacker to execute arbitrary code or cause memory corruption via...

CVE-2010-2865

Adobe Shockwave Player prior to 11.5.8.612 is affected by CVE-2010-2865, a denial-of-service vulnerability reported in APSB10-20. The issue is described as an unspecified DoS via unknown vectors, with the macro summary indicating memory-related issues across Shockwave components. The advisory not...

CVE-2010-2868

Adobe Shockwave Player contains a memory corruption/remote code execution risk due to IML32.dll failing to parse .dir files. A malformed .dir file (e.g., offset 0x320D) can cause memory corruption or code execution. Affected: Shockwave Player

CVE-2011-0335

CVE-2011-0335 affects Adobe Shockwave Player and is tied to Dirapi.dll. The initial description states that before version 11.6.0.626, users could trigger arbitrary code execution or memory corruption via unspecified vectors, with possible DoS. Connected sources corroborate multiple CVEs in the s...

CVE-2012-2029

Adobe Shockwave Player is affected by CVE-2012-2030/2031/2032/2033 due to a memory corruption error when parsing crafted DIR/DCR/RIFF chunks (rcsL) in Shockwave files. A remote attacker can exploit this by convincing a user to open a specially crafted file, potentially leading to arbitrary code e...

CVE-2011-2122

Adobe Shockwave Player (Dirapi.dll) is affected by CVE-2011-2122 before version 11.6.0.626, with memory corruption potentially leading to arbitrary code execution or denial of service via unspecified vectors related to rcsL substructures. This is one of several CVEs tied to Shockwave in the same ...

CVE-2009-3463

CVE-2009-3463 affects Adobe Shockwave Player prior to 11.5.2.602, with an array index error that could allow remote code execution via crafted Shockwave content on a web site. The issue is part of APSB09-16 and is accompanied by related CVEs (3464–3466). The documented impact is arbitrary code ex...

CVE-2009-3464

CVE-2009-3464 affects Adobe Shockwave Player prior to 11.5.2.602. The vulnerability is described as an invalid pointer vulnerability in the processing of crafted Shockwave content, which could allow remote code execution. Some sources group this with multiple related issues under APSB09-16. The d...

CVE-2010-1291

Technical details for CVE-2010-1291 are not publicly provided in the supplied documents; the Connected documents do not specify affected software versions, root cause, or remediation. Monitor for updates.

CVE-2010-2582

CVE-2010-2582 affects Adobe Shockwave Player (Windows/macOS) via a heap-based buffer overflow in the TextXtra.x32 DEMX chunk parsing, caused by a failure to reallocate a buffer to fit chunk data. Public docs consistently describe this as a vulnerability that allows remote code execution if a craf...

CVE-2010-2870

Adobe Shockwave Player (DIRAPIX.dll) up to version 11.5.8.612 is vulnerable due to improper validation of a chunk size in the mmap chunk of Director movies, enabling remote code execution or heap memory corruption. The flaw resides in the RIFF-based Director file format parsing within the DIRAPIX...

CVE-2011-2112

Adobe Shockwave Player (Windows/macOS) is affected by CVE-2011-2112 due to multiple buffer overflows in IML32.dll. This can allow remote code execution and requires exploitation of unspecified vectors. Affected versions are before 11.6.0.626; patching to 11.6.0.626 (or newer) is the remediation s...

CVE-2012-2031

Adobe Shockwave Player (Windows/macOS) has a memory corruption vulnerability (CVE-2012-2031) in parsing the rcsL DIR/DCR chunk of OBJ/RIF data, described as a remote code execution flaw when a user opens a crafted DIR/DCR file. The advisory notes that a remote attacker could execute arbitrary cod...

CVE-2010-1287

Adobe Shockwave Player for Windows/macOS prior to 11.5.7.609 is affected by multiple memory corruption vulnerabilities, including CVE-2010-1287, that can cause denial of service or potentially allow arbitrary code execution via unspecified vectors. The vulnerability family is evidenced by multipl...

CVE-2010-1288

CVE-2010-1288 is a buffer overflow in Adobe Shockwave Player prior to version 11.5.7.609 that could allow arbitrary code execution via unspecified vectors. The vulnerability is part of a set of issues targeted by Adobe APSB10-12, affecting Shockwave Player 11.5.6.606 and earlier on Windows and ma...

CVE-2010-2863

Adobe Shockwave Player before 11.5.8.612 is affected by memory corruption vulnerabilities (e.g., CVE-2010-2863) that could allow denial of service or arbitrary code execution via unspecified vectors. Affected versions include 11.5.7.609 and earlier on Windows/Mac, with multiple related CVEs (e.g....

CVE-2010-2872

Adobe Shockwave Player (Windows/macOS) prior to 11.5.8.612 is affected by CVE-2010-2872, a memory-corruption vulnerability in the Director pami RIFF chunk offset parsing that can lead to remote code execution or a denial of service when a crafted DIR/movie is opened. Root cause: improper validati...

CVE-2010-4189

Adobe Shockwave Player contains a vulnerability in the IML32 module used when parsing GIFs within Director movies. A crafted GIF image with a manipulated global color table size triggers an out-of-range pointer offset, enabling memory corruption and potentially arbitrary code execution or a denia...

CVE-2011-2117

Adobe Shockwave Player (pre-11.6.0.626) is affected by multiple memory corruption/unspecified-vulnerability defects that can lead to arbitrary code execution or memory corruption, including CVEs such as 2011-2117. The issues affect multiple components (e.g., Dirapi.dll, IML32.dll, Shockwave3DAsse...

CVE-2010-4085

CVE-2010-4085 affects Adobe Shockwave Player (dirapi.dll) prior to version 11.5.9.615. The vulnerability is a memory corruption issue that can lead to arbitrary code execution or a denial of service via unspecified vectors. Affected software: Adobe Shockwave Player (Windows/macOS) with the vulner...

CVE-2010-4088

CVE-2010-4088 affects Adobe Shockwave Player prior to 11.5.9.615, via the DIRAPI.dll path where parsing a .dir media file with duplicated KEY* references can cause memory corruption, enabling code execution or a crash. Affected component: Shockwave Player (DIRAPI.dll); vulnerable condition: malfo...

CVE-2010-4191

Adobe Shockwave Player is affected by multiple remote code execution and memory corruption vulnerabilities (CVE-2010-2587/2588/2589, 2010-4092/4093/4187/4190/4191/4192/4306/4194/4195/4196, 2011-0555/0556/0557/0569, among others) tied to the dirapi.dll and related components. The consolidated advi...

CVE-2011-2114

CVE-2011-2114 affects Adobe Shockwave Player (Shockwave 3D Asset.x32 DEMX) and is described by ZDI as a remote code execution via a crafted DEMX chunk in the RIFF-based Director format. The vulnerability causes heap memory overwrite during parsing and requires user interaction (visiting a malicio...

CVE-2012-0760

The CVE-2012-0760 entry concerns Adobe Shockwave Player’s Shockwave 3D Asset component, affected in versions prior to 11.6.4.634. The vulnerability allows arbitrary code execution or a denial of service due to memory corruption via unspecified vectors, as part of a family of Shockwave issues (sha...

CVE-2013-5333

Affected product: Adobe Shockwave Player prior to 12.0.7.148. The vulnerability (CVE-2013-5333) is a memory corruption issue that can allow remote code execution or a denial of service via unspecified vectors. The issue is fixed in patched versions released with APSB13-29 (Adobe Security Update f...

CVE-2009-3466

CVE-2009-3466 affects Adobe Shockwave Player and is described as a memory corruption issue related to an invalid string length, allowing remote code execution via a crafted web page. Affected versions are before 11.5.2.602. The vulnerability is fixed by upgrading to Shockwave Player 11.5.2.602. O...

CVE-2010-2866

CVE-2010-2866 is an Adobe Shockwave Player vulnerability caused by an integer signedness error in the DIRAPI module during parsing of tSAC chunks in Director movies. The flaw can allow remote code execution or memory corruption leading to a denial of service, if a negative/large count value is pr...

CVE-2010-4089

CVE-2010-4089 affects Adobe Shockwave Player, where IML32.dll can memory-corrupt via a crafted .dir file containing duplicated LCSM entries in an mmap record. This enables arbitrary code execution or a denial of service. Affected versions are Shockwave Player prior to 11.5.9.615. Remediation: upg...

CVE-2010-4090

Summary of CVE-2010-4090: Adobe Shockwave Player prior to version 11.5.9.615 is vulnerable to memory corruption that can lead to arbitrary code execution or denial of service via unspecified vectors. The affected component is the Shockwave Player plugin; vulnerability details consistently refer t...

CVE-2010-4093

Adobe Shockwave Player before 11.5.9.620 is vulnerable to remote code execution and memory corruption (CVE-2010-4093 among others) due to an integer overflow/heap memory handling issue when parsing certain records (e.g., FFFFFF88). Publicly documented advisories (APSB11-01) describe a specific ov...

CVE-2010-4190

Adobe Shockwave Player (pre-11.5.9.620) is affected by CVE-2010-4190 through malformed CSWV RIFF chunks that miscalculate an offset for a substructure, causing an out-of-bounds heap memory seek and potential arbitrary code execution or memory corruption. Root cause: incorrect offset calculation d...

CVE-2010-4192

Adobe Shockwave Player before 11.5.9.620 is affected by CVE-2010-4192, among others, via a crafted Director 3D Assets 0xFFFFFF88 record that triggers an incorrect memory allocation. This can lead to arbitrary code execution or memory corruption and, in some cases, a denial of service. The vulnera...