Page 16 of 173 results (0.003 seconds)

CVSS: 9.8EPSS: 2%CPEs: 23EXPL: 0

13 May 2010 — Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291. Adobe Shockwave Player en versiones anteriores a la 11.5.7.609 permite a atacantes provocar una denegación de servicio (corrupción de memoria) o posiblemente ejecutar código de su elección mediante vectores no especificados, una vulner... • http://secunia.com/advisories/38751 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 12%CPEs: 3EXPL: 0

12 May 2010 — Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted FFFFFF45h Shockwave 3D blocks in a Shockwave file. Adobe Shockwave Player en versiones anteriores a la 11.5.7.609 permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (corrupción de memoria) mediante bloques Shockwave 3D FFFFFF45h manipulados en un fichero Shockwave. Secunia Research has discovered a vulnerability ... • http://secunia.com/advisories/38751 • CWE-787: Out-of-bounds Write •

CVSS: 9.3EPSS: 12%CPEs: 3EXPL: 0

12 May 2010 — Integer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via a crafted .dir (aka Director) file. Desbordamiento de entero en Adobe Shockwave Player en versiones anteriores a la 11.5.7.609 puede permitir a atacantes remotos ejecutar código de su elección a través dun fichero .dir (también conocido como Director) manipulado. Secunia Research has discovered a vulnerability in Adobe Shockwave Player, which can be exploited by malicious people to potenti... • http://secunia.com/advisories/38751 • CWE-190: Integer Overflow or Wraparound •

CVSS: 9.3EPSS: 9%CPEs: 3EXPL: 0

12 May 2010 — Adobe Shockwave Player before 11.5.7.609 does not properly process asset entries, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted Shockwave file. Adobe Shockwave Player en versiones anteriores a la 11.5.7.609 no procesa adecuadamente las entradas de activos, lo que permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o posiblemente ejecutar código de su elección mediante un fichero Shockwave ma... • http://secunia.com/advisories/38751 • CWE-787: Out-of-bounds Write •

CVSS: 9.3EPSS: 11%CPEs: 3EXPL: 0

12 May 2010 — Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via crafted embedded fonts in a Shockwave file. Desbordamiento de búfer basado en memoria dinámica en Adobe Shockwave Player en versiones anteriores a la 11.5.7.609 puede permitir a atacantes remotos ejecutar código de su elección mediante fuentes manipuladas embebidas en un fichero Shockwave. Secunia Research has discovered a vulnerability in Adobe Shockwave Player, which can be exp... • http://secunia.com/advisories/38751 • CWE-787: Out-of-bounds Write •

CVSS: 9.3EPSS: 37%CPEs: 3EXPL: 4

12 May 2010 — Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file, related to (1) an erroneous dereference and (2) a certain Shock.dir file. Adobe Shockwave Player en versiones anteriores a la 11.5.7.609 permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (corrupción de memoria) mediante un fichero .dir (también conocido como Director) manipulado, rela... • https://packetstorm.news/files/id/89427 • CWE-787: Out-of-bounds Write •

CVSS: 6.5EPSS: 1%CPEs: 3EXPL: 0

12 May 2010 — Adobe Shockwave Player before 11.5.7.609 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted ATOM size in a .dir (aka Director) file. Adobe Shockwave Player anterior a v11.5.7.609 permite a atacantes remotos provocar una denegación de servicio (bucle infinito y consumo de CPU) a través de la manipulación del tamaño de un fichero .dir (también conocido como Director) Code Audit Labs has discovered a vulnerability on vulnerable installations of Adobe's Shockw... • http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0137.html • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •

CVSS: 9.3EPSS: 8%CPEs: 4EXPL: 0

12 May 2010 — Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director before 11.5.7.609 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir file that triggers an invalid read operation. Error de presencia de signo entero en dirapi.dll en Adobe Shockwave Player en versiones anteriores a la 11.5.7.609 y Adobe Director en versiones anteriores a la 11.5.7.609 permite a atacantes remotos provocar una denega... • http://secunia.com/advisories/38751 • CWE-787: Out-of-bounds Write •

CVSS: 9.3EPSS: 11%CPEs: 3EXPL: 0

12 May 2010 — Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir (aka Director) file that triggers an array index error. Múltiples desbordamientos de enteros en Adobe Shockwave Player en versiones anteriores a la 11.5.7.609 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o posiblemente ejecutar código de su elección mediante un fichero .d... • http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0138.html • CWE-190: Integer Overflow or Wraparound •

CVSS: 10.0EPSS: 12%CPEs: 3EXPL: 0

11 May 2010 — iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file. iml32.dll en Adobe Shockwave Player en versiones anteriores a la 11.5.7.609 no valida un cierto valor de un archivo antes de usarlo en los cálculos de punteros de ficheros, lo que permite a atacantes remotos ejecutar códi... • http://secunia.com/advisories/38751 • CWE-787: Out-of-bounds Write •