jetlib.sec » Tags » shockwave-3d

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

18 items tagged "shockwave 3d"

Related tags: vulnerability [+], memory corruption [+], code [+], adobe [+], zero [+], size [+], code execution [+], d blocks [+], critical vulnerability [+], s system [+], dparse [+], dbo [+], based buffer overflow [+], security [+], remote [+], integer overflow vulnerability [+], idefense security advisory [+], idefense [+], d two [+], d asset [+], advisory [+], adobe shockwave player [+], shockwave [+]

• December 06, 2011
• 17:44

  Adobe Shockwave Shockwave 3d Asset.x32 DEMX Chunk Substructure Count Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  code shockwave adobe adobe-shockwave-player shockwave-3d code-execution  

• December 05, 2011
• 12:34

  Adobe Shockwave Shockwave 3d Asset.x32 DEMX 0xFFFFFF45 Field Parsing Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  code shockwave adobe adobe-shockwave-player shockwave-3d code-execution  

• September 15, 2011
• 15:24

  Adobe Shockwave 3d Asset.x32 DEMX Chunk 0xFFFFFF49 Field Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  adobe-shockwave-player shockwave-3d code-execution  

• June 16, 2011
• 11:00

  Bugtraq: iDefense Security Advisory 06.14.11: Adobe Shockwave 3D Asset DEMX Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  iDefense Security Advisory 06.14.11: Adobe Shockwave 3D Asset DEMX Integer Overflow Vulnerability

  Tags:  advisory idefense security d-asset integer-overflow-vulnerability idefense-security-advisory shockwave-3d  

• 3:42

  Zero Day Initiative Advisory 11-222

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 11-222 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the DEMX chunk inside Adobe's RIFF-based Director file format. The code within the Shockwave 3d Asset.x32 module does not properly check a size value used as the size for a malloc. The given size will wrap, causing a small buffer to be allocated. This can lead to memory corruption which can be leveraged to execute arbitrary code under the context of the user running the browser.

  Tags:  adobe-shockwave-player memory-corruption shockwave-3d  

• 3:42

  Zero Day Initiative Advisory 11-222

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 11-222 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the DEMX chunk inside Adobe's RIFF-based Director file format. The code within the Shockwave 3d Asset.x32 module does not properly check a size value used as the size for a malloc. The given size will wrap, causing a small buffer to be allocated. This can lead to memory corruption which can be leveraged to execute arbitrary code under the context of the user running the browser.

  Tags:  size zero code adobe-shockwave-player memory-corruption shockwave-3d  

• 3:42

  Zero Day Initiative Advisory 11-222

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 11-222 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the DEMX chunk inside Adobe's RIFF-based Director file format. The code within the Shockwave 3d Asset.x32 module does not properly check a size value used as the size for a malloc. The given size will wrap, causing a small buffer to be allocated. This can lead to memory corruption which can be leveraged to execute arbitrary code under the context of the user running the browser.

  Tags:  size zero code adobe-shockwave-player memory-corruption shockwave-3d  

• June 14, 2011
• 16:05

  Zero Day Initiative Advisory 11-211

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 11-211 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the DEMX chunk inside Adobe's RIFF-based Director file format. The code within the Shockwave 3d Asset.x32 module does not properly check a size value used as the size for a malloc. The given size will wrap, causing a small buffer to be allocated. This can lead to memory corruption which can be leveraged to execute arbitrary code under the context of the user running the browser.

  Tags:  adobe-shockwave-player memory-corruption shockwave-3d  

• 16:05

  Zero Day Initiative Advisory 11-211

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 11-211 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the DEMX chunk inside Adobe's RIFF-based Director file format. The code within the Shockwave 3d Asset.x32 module does not properly check a size value used as the size for a malloc. The given size will wrap, causing a small buffer to be allocated. This can lead to memory corruption which can be leveraged to execute arbitrary code under the context of the user running the browser.

  Tags:  size zero code adobe-shockwave-player memory-corruption shockwave-3d  

• 16:05

  Zero Day Initiative Advisory 11-211

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 11-211 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the DEMX chunk inside Adobe's RIFF-based Director file format. The code within the Shockwave 3d Asset.x32 module does not properly check a size value used as the size for a malloc. The given size will wrap, causing a small buffer to be allocated. This can lead to memory corruption which can be leveraged to execute arbitrary code under the context of the user running the browser.

  Tags:  size zero code adobe-shockwave-player memory-corruption shockwave-3d  

• July 01, 2010
• 16:54

  Adobe Shockwave 3D Blocks Field Code Execution Vulnerability

   » ‎ SecuriTeam
  A critical vulnerability was discovered in Adobe Shockwave Player.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  shockwave vulnerability adobe d-blocks adobe-shockwave-player critical-vulnerability shockwave-3d  

• 13:58

  Adobe Shockwave 3D Two Remote Code Execution Vulnerabilities

   » ‎ SecuriTeam
  Two critical vulnerabilities were discovered in Adobe Shockwave Player.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  shockwave remote adobe d-two adobe-shockwave-player shockwave-3d code-execution  

• 13:58

  Adobe Shockwave 3D Blocks Field Code Execution Vulnerability

   » ‎ SecuriTeam
  A critical vulnerability was discovered in Adobe Shockwave Player.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  shockwave vulnerability adobe d-blocks adobe-shockwave-player critical-vulnerability shockwave-3d  

• 13:06

  Adobe Shockwave 3D Blocks Field Code Execution Vulnerability

   » ‎ SecuriTeam
  A critical vulnerability was discovered in Adobe Shockwave Player.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  shockwave vulnerability adobe d-blocks adobe-shockwave-player critical-vulnerability shockwave-3d  

• May 12, 2010
• 9:01

  secunia-asp3dparse.txt

   » ‎ Packet Storm Security Recent Files
  Secunia Research has discovered a vulnerability in Adobe Shockwave Player, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused by a boundary error when processing FFFFFF45h Shockwave 3D blocks. This can be exploited to corrupt memory via a specially crafted Shockwave file. Successful exploitation allows execution of arbitrary code. Version 11.5.6.606 is affected.

  Tags:  shockwave vulnerability dparse adobe-shockwave-player shockwave-3d s-system  

• 9:00

  secunia-asp3dparse.txt

   » ‎ Packet Storm Security Advisories
  Secunia Research has discovered a vulnerability in Adobe Shockwave Player, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused by a boundary error when processing FFFFFF45h Shockwave 3D blocks. This can be exploited to corrupt memory via a specially crafted Shockwave file. Successful exploitation allows execution of arbitrary code. Version 11.5.6.606 is affected.

  Tags:  shockwave vulnerability dparse adobe-shockwave-player shockwave-3d s-system  

• January 20, 2010
• 16:00

  secunia-asp3dbo.txt

   » ‎ Packet Storm Security Recent Files
  Secunia Research has discovered a vulnerability in Adobe Shockwave Player, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused by a boundary error when processing Shockwave 3D models. This can be exploited to cause a heap-based buffer overflow via a specially crafted Shockwave file. Successful exploitation allows execution of arbitrary code. Version 11.5.2.602 is affected.

  Tags:  shockwave vulnerability dbo adobe-shockwave-player based-buffer-overflow shockwave-3d  

• 16:00

  secunia-asp3dbo.txt

   » ‎ Packet Storm Security Advisories
  Secunia Research has discovered a vulnerability in Adobe Shockwave Player, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused by a boundary error when processing Shockwave 3D models. This can be exploited to cause a heap-based buffer overflow via a specially crafted Shockwave file. Successful exploitation allows execution of arbitrary code. Version 11.5.2.602 is affected.

  Tags:  shockwave vulnerability dbo adobe-shockwave-player based-buffer-overflow shockwave-3d