RETIRED: Adobe Shockwave Player APSB11-17 Multiple Remote Vulnerabilities
BID:48270
Info
RETIRED: Adobe Shockwave Player APSB11-17 Multiple Remote Vulnerabilities
| Bugtraq ID: | 48270 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 14 2011 12:00AM |
| Updated: | Jun 16 2011 04:20PM |
| Credit: | Honggang Ren of Fortinet's Fortiguard Labs; Mark Yason of IBM X-Force Research, IBM Security Solutions; Carsten Eiram, Secunia Research; Aaron Portnoy and Logan Brown, TippingPoint DVLabs; Aniway through TippingPoint's Zero Day Initiative; Luigi Auriemma t |
| Vulnerable: |
Adobe Shockwave Player 11.5.7 .609 Adobe Shockwave Player 11.5.6 .606 Adobe Shockwave Player 11.5.2 .606 Adobe Shockwave Player 11.5.2 .602 Adobe Shockwave Player 11.5.1 .601 Adobe Shockwave Player 11.5 .601 Adobe Shockwave Player 11.5 .600 Adobe Shockwave Player 11.5 .596 Adobe Shockwave Player 11.5.9.620 Adobe Shockwave Player 11.5.9.615 Adobe Shockwave Player 11.5.8.612 Adobe Shockwave Player 11.5.0.595 Adobe Shockwave Player 11.0.3.471 Adobe Shockwave Player 11.0.0.456 Adobe Shockwave Player 11 |
| Not Vulnerable: |
Adobe Shockwave Player 11.6.0.626 |
Discussion
RETIRED: Adobe Shockwave Player APSB11-17 Multiple Remote Vulnerabilities
Adobe Shockwave Player is prone to multiple remote vulnerabilities.
Attackers can exploit these issues to crash the affected application and execute arbitrary code within the context of the affected application.
Versions prior to Adobe Shockwave Player 11.6.0.626 are vulnerable.
This BID is being retired. The following individual records exist to better document the issues:
48273 Adobe Shockwave Player Font Structure CVE-2011-2109 Multiple Integer Overflow Vulnerabilities
48275 Adobe Shockwave Player CVE-2011-0335 Multiple Remote Memory Corruption Vulnerabilities
48278 Adobe Shockwave Player CVE-2011-2112 Multiple Remote Vulnerabilities
48284 Adobe Shockwave Player 'Dirapi.dll' CVE-2011-0317 Remote Memory Corruption Vulnerability
48286 Adobe Shockwave Player 'Dirapi.dll' CVE-2011-0318 Remote Memory Corruption Vulnerability
48287 Adobe Shockwave Player 'Dirapi.dll' CVE-2011-0319 Remote Memory Corruption Vulnerability
48288 Adobe Shockwave Player 'Dirapi.dll' CVE-2011-0320 Remote Memory Corruption Vulnerability
48289 Adobe Shockwave Player CVE-2011-2127 Remote Memory Corruption Vulnerability
48290 Adobe Shockwave Player CVE-2011-2128 Remote Memory Corruption Vulnerability
48291 Adobe Shockwave Player 'IML32.dll' CVE-2011-2116 Remote Memory Corruption Vulnerability
48292 Adobe Shockwave Player CVE-2011-2117 Remote Memory Corruption Vulnerability
48294 Adobe Shockwave Player CVE-2011-2124 Remote Memory Corruption Vulnerability
48296 Adobe Shockwave Player 'Dirapi.dll' CVE-2011-2119 Remote Memory Corruption Vulnerability
48297 Adobe Shockwave Player 'Dirapi.dll' CVE-2011-2122 Remote Memory Corruption Vulnerability
48298 Adobe Shockwave Player CVE-2011-2114 Multiple Memory Corruption Vulnerabilities
48299 Adobe Shockwave Player 'IML32.dll' CVE-2011-2115 Multiple Memory Corruption Vulnerabilities
48300 Adobe Shockwave Player CVE-2011-2111 Multiple Memory Corruption Vulnerabilities
48302 Adobe Shockwave Player 'AudioMixer.x32' Module Remote Memory Corruption Vulnerability
48304 Adobe Shockwave Player 'tSAC' Chunk String Termination Remote Memory Corruption Vulnerability
48306 Adobe Shockwave Player CVE-2011-2113 Multiple Remote Code Execution Vulnerabilities
48307 Adobe Shockwave Player Cursor Structure Parsing Remote Code Execution Vulnerability
48308 Adobe Shockwave Player CVE-2011-2125 Unspecified Buffer Overflow Vulnerability
48309 Adobe Shockwave Player CVE-2011-2126 Unspecified Buffer Overflow Vulnerability
48310 Adobe Shockwave Player CVE-2011-2123 Integer Overflow Vulnerability
48311 Adobe Shockwave Player CVE-2011-2108 Unspecified Remote Code Execution Vulnerability
Adobe Shockwave Player is prone to multiple remote vulnerabilities.
Attackers can exploit these issues to crash the affected application and execute arbitrary code within the context of the affected application.
Versions prior to Adobe Shockwave Player 11.6.0.626 are vulnerable.
This BID is being retired. The following individual records exist to better document the issues:
48273 Adobe Shockwave Player Font Structure CVE-2011-2109 Multiple Integer Overflow Vulnerabilities
48275 Adobe Shockwave Player CVE-2011-0335 Multiple Remote Memory Corruption Vulnerabilities
48278 Adobe Shockwave Player CVE-2011-2112 Multiple Remote Vulnerabilities
48284 Adobe Shockwave Player 'Dirapi.dll' CVE-2011-0317 Remote Memory Corruption Vulnerability
48286 Adobe Shockwave Player 'Dirapi.dll' CVE-2011-0318 Remote Memory Corruption Vulnerability
48287 Adobe Shockwave Player 'Dirapi.dll' CVE-2011-0319 Remote Memory Corruption Vulnerability
48288 Adobe Shockwave Player 'Dirapi.dll' CVE-2011-0320 Remote Memory Corruption Vulnerability
48289 Adobe Shockwave Player CVE-2011-2127 Remote Memory Corruption Vulnerability
48290 Adobe Shockwave Player CVE-2011-2128 Remote Memory Corruption Vulnerability
48291 Adobe Shockwave Player 'IML32.dll' CVE-2011-2116 Remote Memory Corruption Vulnerability
48292 Adobe Shockwave Player CVE-2011-2117 Remote Memory Corruption Vulnerability
48294 Adobe Shockwave Player CVE-2011-2124 Remote Memory Corruption Vulnerability
48296 Adobe Shockwave Player 'Dirapi.dll' CVE-2011-2119 Remote Memory Corruption Vulnerability
48297 Adobe Shockwave Player 'Dirapi.dll' CVE-2011-2122 Remote Memory Corruption Vulnerability
48298 Adobe Shockwave Player CVE-2011-2114 Multiple Memory Corruption Vulnerabilities
48299 Adobe Shockwave Player 'IML32.dll' CVE-2011-2115 Multiple Memory Corruption Vulnerabilities
48300 Adobe Shockwave Player CVE-2011-2111 Multiple Memory Corruption Vulnerabilities
48302 Adobe Shockwave Player 'AudioMixer.x32' Module Remote Memory Corruption Vulnerability
48304 Adobe Shockwave Player 'tSAC' Chunk String Termination Remote Memory Corruption Vulnerability
48306 Adobe Shockwave Player CVE-2011-2113 Multiple Remote Code Execution Vulnerabilities
48307 Adobe Shockwave Player Cursor Structure Parsing Remote Code Execution Vulnerability
48308 Adobe Shockwave Player CVE-2011-2125 Unspecified Buffer Overflow Vulnerability
48309 Adobe Shockwave Player CVE-2011-2126 Unspecified Buffer Overflow Vulnerability
48310 Adobe Shockwave Player CVE-2011-2123 Integer Overflow Vulnerability
48311 Adobe Shockwave Player CVE-2011-2108 Unspecified Remote Code Execution Vulnerability
Exploit / POC
RETIRED: Adobe Shockwave Player APSB11-17 Multiple Remote Vulnerabilities
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may be trivial to exploit and may not require specific exploit code.
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may be trivial to exploit and may not require specific exploit code.
Solution / Fix
RETIRED: Adobe Shockwave Player APSB11-17 Multiple Remote Vulnerabilities
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
RETIRED: Adobe Shockwave Player APSB11-17 Multiple Remote Vulnerabilities
References:
References: