Adobe

Shockwave Player

174 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2010-0986

  • EPSS 8.38%
  • Veröffentlicht 13.05.2010 17:30:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Adobe Shockwave Player before 11.5.7.609 does not properly process asset entries, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted Shockwave file.

9.3

CVE-2010-0987

  • EPSS 12.51%
  • Veröffentlicht 13.05.2010 17:30:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via crafted embedded fonts in a Shockwave file.

9.3

CVE-2009-4002

  • EPSS 21.29%
  • Veröffentlicht 21.01.2010 19:30:00
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file.

9.3

CVE-2009-4003

  • EPSS 17.23%
  • Veröffentlicht 21.01.2010 19:30:00
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via (1) an unspecified block type in a Shockwave file, leading to a heap-based buffer overflow; and might allow remote attackers t...

9.3

CVE-2009-3463

  • EPSS 6.54%
  • Veröffentlicht 04.11.2009 15:30:00
  • Zuletzt bearbeitet 23.04.2026 00:35:47

Array index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site. NOTE: some of these details are obtained from third party information.

9.3

CVE-2009-3464

  • EPSS 10.65%
  • Veröffentlicht 04.11.2009 15:30:00
  • Zuletzt bearbeitet 23.04.2026 00:35:47

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3465. NOTE: some of these details ...

9.3

CVE-2009-3465

  • EPSS 10.65%
  • Veröffentlicht 04.11.2009 15:30:00
  • Zuletzt bearbeitet 23.04.2026 00:35:47

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3464. NOTE: some of these details ...

9.3

CVE-2009-3466

  • EPSS 3.84%
  • Veröffentlicht 04.11.2009 15:30:00
  • Zuletzt bearbeitet 23.04.2026 00:35:47

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an "invalid string length vulnerability." NOTE: some of these details are obtained from thir...

9.3

CVE-2009-3244

  • EPSS 41.57%
  • Veröffentlicht 18.09.2009 10:30:01
  • Zuletzt bearbeitet 23.04.2026 00:35:47

Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PlayerVersion property value.

9.3

CVE-2009-1860

  • EPSS 6.95%
  • Veröffentlicht 25.06.2009 01:30:01
  • Zuletzt bearbeitet 23.04.2026 00:35:47

Unspecified vulnerability in Adobe Shockwave Player before 11.5.0.600 allows remote attackers to execute arbitrary code via crafted Shockwave Player 10 content.