RETIRED: Adobe Shockwave Player APSB10-12 Multiple Remote Vulnerabilities
BID:40066
Info
RETIRED: Adobe Shockwave Player APSB10-12 Multiple Remote Vulnerabilities
| Bugtraq ID: | 40066 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 11 2010 12:00AM |
| Updated: | May 12 2010 05:52PM |
| Credit: | Chaouki Bekrar of VUPEN Vulnerability Research Team, Sebastien Renaud of VUPEN Vulnerability Research Team, Code Audit Labs, Nahuel Riva of Core Security Technologies, Gjoko Krstic of Zero Science Lab, Chro HD of Fortinet's FortiGuard Labs, An anonymous re |
| Vulnerable: |
Adobe Shockwave Player 11.5.6 .606 Adobe Shockwave Player 11.5.2 .606 Adobe Shockwave Player 11.5.2 .602 Adobe Shockwave Player 11.5.1 .601 Adobe Shockwave Player 11.5 .601 Adobe Shockwave Player 11.5 .600 Adobe Shockwave Player 11.5 .596 |
| Not Vulnerable: |
Adobe Shockwave Player 11.5.7 .609 |
Discussion
RETIRED: Adobe Shockwave Player APSB10-12 Multiple Remote Vulnerabilities
Adobe Shockwave Player is prone to multiple remote vulnerabilities.
Attackers can exploit these issues to crash the affected application and execute arbitrary code within the context of the affected application.
Adobe Shockwave Player 11.5.6.606 and prior are vulnerable.
This BID is being retired. The following individual records exist to better document the issues:
40083 Adobe Shockwave Player CVE-2010-0127 3D Parsing Remote Code Execution Vulnerability
40096 Adobe Shockwave Player CVE-2010-1288 Buffer Overflow Vulnerability
40093 Adobe Shockwave Player CVE-2010-0987 Buffer Overflow Vulnerability
40094 Adobe Shockwave Player CVE-2010-1290 Memory Corruption Vulnerability
40091 Adobe Shockwave Player CVE-2010-1284 Multiple Remote Code Execution Vulnerabilities
40088 Adobe Shockwave Player CVE-2010-1282 Denial of Service Vulnerability
40090 Adobe Shockwave Player CVE-2010-1291 Memory Corruption Vulnerability
40089 Adobe Shockwave Player CVE-2010-1287 Memory Corruption Vulnerability
40082 Adobe Shockwave Player Diretor File Multiple Remote Code Execution Vulnerabilities
40084 Adobe Shockwave Player CVE-2010-0130 Unspecified Remote Code Execution Vulnerability
40085 Adobe Shockwave Player CVE-2010-1286 Memory Corruption Vulnerability
40086 Adobe Shockwave Player CVE-2010-0986 Unspecified Remote Code Execution Vulnerability
40087 Adobe Shockwave Player CVE-2010-1289 Unspecified Remote Code Execution Vulnerability
40081 Adobe Shockwave Player DIR File Parsing Remote Code Execution Vulnerabilities
40079 Adobe Shockwave Player PAMI Chunk Remote Code Execution Vulnerability
40077 Adobe Shockwave Player 3D Object Parsing Memory Corruption Vulnerability
40078 Adobe Shockwave Player Director File Parsing Invalid Offset Remote Code Execution Vulnerability
40076 Adobe Shockwave Player 'DIRAPI.dll' Remote Code Execution Vulnerability
Adobe Shockwave Player is prone to multiple remote vulnerabilities.
Attackers can exploit these issues to crash the affected application and execute arbitrary code within the context of the affected application.
Adobe Shockwave Player 11.5.6.606 and prior are vulnerable.
This BID is being retired. The following individual records exist to better document the issues:
40083 Adobe Shockwave Player CVE-2010-0127 3D Parsing Remote Code Execution Vulnerability
40096 Adobe Shockwave Player CVE-2010-1288 Buffer Overflow Vulnerability
40093 Adobe Shockwave Player CVE-2010-0987 Buffer Overflow Vulnerability
40094 Adobe Shockwave Player CVE-2010-1290 Memory Corruption Vulnerability
40091 Adobe Shockwave Player CVE-2010-1284 Multiple Remote Code Execution Vulnerabilities
40088 Adobe Shockwave Player CVE-2010-1282 Denial of Service Vulnerability
40090 Adobe Shockwave Player CVE-2010-1291 Memory Corruption Vulnerability
40089 Adobe Shockwave Player CVE-2010-1287 Memory Corruption Vulnerability
40082 Adobe Shockwave Player Diretor File Multiple Remote Code Execution Vulnerabilities
40084 Adobe Shockwave Player CVE-2010-0130 Unspecified Remote Code Execution Vulnerability
40085 Adobe Shockwave Player CVE-2010-1286 Memory Corruption Vulnerability
40086 Adobe Shockwave Player CVE-2010-0986 Unspecified Remote Code Execution Vulnerability
40087 Adobe Shockwave Player CVE-2010-1289 Unspecified Remote Code Execution Vulnerability
40081 Adobe Shockwave Player DIR File Parsing Remote Code Execution Vulnerabilities
40079 Adobe Shockwave Player PAMI Chunk Remote Code Execution Vulnerability
40077 Adobe Shockwave Player 3D Object Parsing Memory Corruption Vulnerability
40078 Adobe Shockwave Player Director File Parsing Invalid Offset Remote Code Execution Vulnerability
40076 Adobe Shockwave Player 'DIRAPI.dll' Remote Code Execution Vulnerability
Exploit / POC
RETIRED: Adobe Shockwave Player APSB10-12 Multiple Remote Vulnerabilities
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may not require specific exploit code and may be trivial to exploit.
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may not require specific exploit code and may be trivial to exploit.
Solution / Fix
RETIRED: Adobe Shockwave Player APSB10-12 Multiple Remote Vulnerabilities
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
RETIRED: Adobe Shockwave Player APSB10-12 Multiple Remote Vulnerabilities
References:
References:
- Adobe Homepage (Adobe)
- Adobe Security Advisory APSB10-12 (Adobe)