Adobe

Shockwave Player

174 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2010-1291

  • EPSS 3.56%
  • Veröffentlicht 13.05.2010 21:30:01
  • Zuletzt bearbeitet 16.06.2026 23:18:02

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-201...

9.3

CVE-2010-1280

Exploit
  • EPSS 16.64%
  • Veröffentlicht 13.05.2010 17:30:02
  • Zuletzt bearbeitet 16.06.2026 23:18:00

Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file, related to (1) an erroneous dereference and (2) a certain Shock.dir fi...

9.3

CVE-2010-1281

  • EPSS 7.48%
  • Veröffentlicht 13.05.2010 17:30:02
  • Zuletzt bearbeitet 16.06.2026 23:18:00

iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)...

6.5

CVE-2010-1282

  • EPSS 2.97%
  • Veröffentlicht 13.05.2010 17:30:02
  • Zuletzt bearbeitet 16.06.2026 23:18:01

Adobe Shockwave Player before 11.5.7.609 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted ATOM size in a .dir (aka Director) file.

9.3

CVE-2010-1283

  • EPSS 6.27%
  • Veröffentlicht 13.05.2010 17:30:02
  • Zuletzt bearbeitet 16.06.2026 23:18:01

Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir (aka Director) files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a modified field in a 0xFFFFFF...

9.3

CVE-2010-1292

  • EPSS 6.37%
  • Veröffentlicht 13.05.2010 17:30:02
  • Zuletzt bearbeitet 16.06.2026 23:18:02

The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a d...

9.3

CVE-2010-0127

  • EPSS 5.07%
  • Veröffentlicht 13.05.2010 17:30:01
  • Zuletzt bearbeitet 16.06.2026 23:15:31

Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted FFFFFF45h Shockwave 3D blocks in a Shockwave file.

9.3

CVE-2010-0128

  • EPSS 4.99%
  • Veröffentlicht 13.05.2010 17:30:01
  • Zuletzt bearbeitet 16.06.2026 23:15:31

Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director before 11.5.7.609 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir fil...

9.3

CVE-2010-0129

  • EPSS 6.3%
  • Veröffentlicht 13.05.2010 17:30:01
  • Zuletzt bearbeitet 16.06.2026 23:15:32

Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir (aka Director) file that triggers an array index erro...

9.3

CVE-2010-0130

  • EPSS 7.31%
  • Veröffentlicht 13.05.2010 17:30:01
  • Zuletzt bearbeitet 16.06.2026 23:15:32

Integer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via a crafted .dir (aka Director) file.