adobe shockwave player 8.0.196a vulnerabilities and exploits

(subscribe to this query)

Use-after-free vulnerability in an unspecified compatibility component in Adobe Shockwave Player prior to 11.5.9.620 allows user-assisted remote malicious users to execute arbitrary code via a crafted web site, related to the Shockwave Settings window and an unloaded library. NOT...

Integer overflow in Adobe Shockwave Player prior to 11.5.9.620 allows remote malicious users to execute arbitrary code via a Director movie with a large count value in 3D assets type 0xFFFFFF45 record, which triggers a "faulty allocation" and memory corruption.

The TextXtra.x32 module in Adobe Shockwave Player prior to 11.5.9.620 allows remote malicious users to execute arbitrary code or cause a denial of service (heap memory corruption) via a Director file with a crafted DEMX RIFF chunk that triggers incorrect buffer allocation, a diff...

The Font Xtra.x32 module in Adobe Shockwave Player prior to 11.5.9.620 allows malicious users to execute arbitrary code or cause a denial of service (memory corruption) via a PFR1 chunk containing an invalid size value that leads to an unexpected sign extension and a buffer overf...

The Font Xtra.x32 module in Adobe Shockwave Player prior to 11.5.9.620 allows malicious users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PFR1 chunk that leads to an unexpected sign extension and an invalid pointer dereference, a diffe...

Adobe Shockwave Player prior to 11.5.9.620 allows malicious users to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, CVE-2010-4192, and CVE-...

The dirapi.dll module in Adobe Shockwave Player prior to 11.5.9.620 allows malicious users to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with an IFWV chunk with a size field of 0, which is used in the calculation of a file offset ...

Adobe Shockwave Player prior to 11.5.9.620 does not properly validate unspecified input data, which allows malicious users to execute arbitrary code via unknown vectors.

The dirapi.dll module in Adobe Shockwave Player prior to 11.5.9.620 does not properly validate unspecified input data, which allows malicious users to execute arbitrary code via unknown vectors.

The TextXtra module in Adobe Shockwave Player prior to 11.5.9.620 does not properly validate unspecified input data, which allows malicious users to execute arbitrary code via unknown vectors.

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook