Vulnerabilities > Adobe > Shockwave Player > 11.5.7.609

DATE CVE VULNERABILITY TITLE RISK
2010-08-26 CVE-2010-2866 Numeric Errors vulnerability in Adobe Shockwave Player
Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a count value associated with an "undocumented structure" and the tSAC chunk in a Director movie.
network
adobe CWE-189
critical
9.3
2010-08-26 CVE-2010-2865 Denial-Of-Service vulnerability in Shockwave Player
Unspecified vulnerability in Adobe Shockwave Player before 11.5.8.612 allows attackers to cause a denial of service via unknown vectors.
network
low complexity
adobe
5.0
2010-08-26 CVE-2010-2864 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Adobe Shockwave Player
IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x24C6 of a certain file.
network
adobe CWE-119
critical
9.3
2010-08-26 CVE-2010-2863 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Adobe Shockwave Player
Adobe Shockwave Player before 11.5.8.612 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
network
low complexity
adobe CWE-119
critical
10.0
2010-05-13 CVE-2010-1290 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Adobe Shockwave Player
Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, and CVE-2010-1291.
network
adobe CWE-119
critical
9.3
2009-09-18 CVE-2009-3244 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Adobe Shockwave Player
Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PlayerVersion property value.
network
adobe CWE-119
critical
9.3