< Back to JetLib.com

jetlib.sec » Tags » director-file

« Expand/Collapse

13 items tagged "director file"

Related tags: shockwave [+], shockwave player [+], memory corruption [+], adobe shockwave player [+], adobe director [+], player [+], code [+], user [+], system compromise [+], vulnerability research [+], vulnerability [+], player versions [+], cpu load [+], shockwave director [+], safer use [+], code execution [+], adobe [+]

February 15, 2012
9:11
Adobe Shockwave Player Parsing block_cout Memory Corruption
» ‎ Packet Storm Security Advisories

Adobe Shockwave Player versions 11.6.x.x suffer from a memory corruption vulnerability when parsing the field of KEY_ATOM of Director File.
Tags: shockwave player adobe director-file adobe-shockwave-player memory-corruption player-versions

9:11
Adobe Shockwave Player Parsing block_cout Memory Corruption
» ‎ Packet Storm Security Recent Files

Adobe Shockwave Player versions 11.6.x.x suffer from a memory corruption vulnerability when parsing the field of KEY_ATOM of Director File.
Tags: shockwave player adobe director-file adobe-shockwave-player memory-corruption player-versions

9:11
Adobe Shockwave Player Parsing block_cout Memory Corruption
» ‎ Packet Storm Security Misc. Files

Adobe Shockwave Player versions 11.6.x.x suffer from a memory corruption vulnerability when parsing the field of KEY_ATOM of Director File.
Tags: shockwave player adobe director-file adobe-shockwave-player memory-corruption player-versions

December 05, 2011
12:29
Adobe Shockwave Director File rcsL Chunk Multiple Opcode Parsing Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Shockwave.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code shockwave adobe director-file shockwave-director code-execution safer-use

February 14, 2011
12:09
Adobe Shockwave DIRAPI Lctx Chunk Memory Corruption
» ‎ Packet Storm Security Advisories

VUPEN Vulnerability Research Team discovered a critical vulnerability in Adobe Shockwave. The vulnerability is caused by a memory corruption error in the "DIRAPI.dll" module when processing the "LCTX" chunk within a Director File, which could be exploited by remote attackers to execute arbitrary code by tricking a user into visiting a malicious web page. Adobe Shockwave Player versions 11.5.9.615 and prior are affected.
Tags: shockwave vulnerability adobe director-file adobe-shockwave-player memory-corruption vulnerability-research

12:09
Adobe Shockwave DIRAPI Lctx Chunk Memory Corruption
» ‎ Packet Storm Security Recent Files

VUPEN Vulnerability Research Team discovered a critical vulnerability in Adobe Shockwave. The vulnerability is caused by a memory corruption error in the "DIRAPI.dll" module when processing the "LCTX" chunk within a Director File, which could be exploited by remote attackers to execute arbitrary code by tricking a user into visiting a malicious web page. Adobe Shockwave Player versions 11.5.9.615 and prior are affected.
Tags: shockwave vulnerability adobe director-file adobe-shockwave-player memory-corruption vulnerability-research

12:09
Adobe Shockwave DIRAPI Lctx Chunk Memory Corruption
» ‎ Packet Storm Security Misc. Files

VUPEN Vulnerability Research Team discovered a critical vulnerability in Adobe Shockwave. The vulnerability is caused by a memory corruption error in the "DIRAPI.dll" module when processing the "LCTX" chunk within a Director File, which could be exploited by remote attackers to execute arbitrary code by tricking a user into visiting a malicious web page. Adobe Shockwave Player versions 11.5.9.615 and prior are affected.
Tags: shockwave vulnerability adobe director-file adobe-shockwave-player memory-corruption vulnerability-research

May 11, 2010
20:34
CAL-20100204-1.txt
» ‎ Packet Storm Security Recent Files

Code Audit Labs has discovered a vulnerability on vulnerable installations of Adobe's Shockwave Player. User interaction is required in that a user must visit a malicious web site. The specific flaw exists when the Shockwave player attempts to load a specially crafted Adobe Director File. Exploitation can lead to remote system high cpu load (infinite loop).
Tags: shockwave player adobe director-file adobe-director shockwave-player cpu-load
20:34
CAL-20100204-2.txt
» ‎ Packet Storm Security Recent Files

Code Audit Labs has discovered a vulnerability allows remote attackers to execute code on vulnerable installations of Adobe's Shockwave Player. User interaction is required in that a user must visit a malicious web site. The specific flaw exists when the Shockwave player attempts to load a specially crafted Adobe Director File. When a malicious value is used extern to signed integer. Exploitation can lead to remote system compromise under the credentials of the currently logged in user.
Tags: code user adobe director-file adobe-director shockwave-player system-compromise
20:34
CAL-20100204-3.txt
» ‎ Packet Storm Security Recent Files

Code Audit Labs has discovered a vulnerability allows remote attackers to execute code on vulnerable installations of Adobe's Shockwave Player. User interaction is required in that a user must visit a malicious web site. The specific flaw exists when the Shockwave player attempts to load a specially crafted Adobe Director File. When a malicious value is used during a memory dereference a possible 4-byte memory overwrite may occur. Exploitation can lead to remote system compromise under the credentials of the currently logged in user.
Tags: code adobe user director-file adobe-director shockwave-player system-compromise

20:33
CAL-20100204-2.txt
» ‎ Packet Storm Security Advisories

Code Audit Labs has discovered a vulnerability allows remote attackers to execute code on vulnerable installations of Adobe's Shockwave Player. User interaction is required in that a user must visit a malicious web site. The specific flaw exists when the Shockwave player attempts to load a specially crafted Adobe Director File. When a malicious value is used extern to signed integer. Exploitation can lead to remote system compromise under the credentials of the currently logged in user.
Tags: code user adobe director-file adobe-director shockwave-player system-compromise
20:33
CAL-20100204-1.txt
» ‎ Packet Storm Security Advisories

Code Audit Labs has discovered a vulnerability on vulnerable installations of Adobe's Shockwave Player. User interaction is required in that a user must visit a malicious web site. The specific flaw exists when the Shockwave player attempts to load a specially crafted Adobe Director File. Exploitation can lead to remote system high cpu load (infinite loop).
Tags: shockwave player adobe director-file adobe-director shockwave-player cpu-load
20:33
CAL-20100204-3.txt
» ‎ Packet Storm Security Advisories

Code Audit Labs has discovered a vulnerability allows remote attackers to execute code on vulnerable installations of Adobe's Shockwave Player. User interaction is required in that a user must visit a malicious web site. The specific flaw exists when the Shockwave player attempts to load a specially crafted Adobe Director File. When a malicious value is used during a memory dereference a possible 4-byte memory overwrite may occur. Exploitation can lead to remote system compromise under the credentials of the currently logged in user.
Tags: code adobe user director-file adobe-director shockwave-player system-compromise