Adobe Shockwave Player vulnerabilities
173 known vulnerabilities affecting adobe/shockwave_player.
Total CVEs
173
CISA KEV
0
Public exploits
4
Exploited in wild
1
Severity breakdown
CRITICAL160HIGH10MEDIUM3
Vulnerabilities
Page 2 of 9
CVE-2011-2125P3CRITICALCVSS 9.3≤ 11.5.9.620v1.0+41 more2011-06-16
CVE-2011-2125 [CRITICAL] CWE-119 CVE-2011-2125: Buffer overflow in Dirapix.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execu
Buffer overflow in Dirapix.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2011-2126P3CRITICALCVSS 9.3≤ 11.5.9.620v1.0+41 more2011-06-16
CVE-2011-2126 [CRITICAL] CWE-119 CVE-2011-2126: Buffer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary co
Buffer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2005-3525P3CRITICALCVSS 9.3v1.0v2.0+7 more2005-12-31
CVE-2005-3525 [CRITICAL] CVE-2005-3525: Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave P
Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and earlier allows remote attackers to execute arbitrary code via crafted large values for unspecified parameters.
nvd
CVE-2010-4188P3CRITICALCVSS 9.3≤ 11.5.9.615v1.0+40 more2011-02-10
CVE-2010-4188 [CRITICAL] CVE-2010-4188: The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitr
The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with an IFWV chunk with a size field of 0, which is used in the calculation of a file offset and causes invalid data to be used as a loop counter, triggering a heap-based buffer ov
nvd
CVE-2014-0505P3CRITICALCVSS 10.0≤ 12.0.9.149v12.0.0.112+5 more2014-03-14
CVE-2014-0505 [CRITICAL] CWE-119 CVE-2014-0505: Adobe Shockwave Player before 12.1.0.150 allows remote attackers to execute arbitrary code or cause
Adobe Shockwave Player before 12.1.0.150 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
nvd
CVE-2011-2113P3CRITICALCVSS 9.3≤ 11.5.9.620v1.0+41 more2011-06-16
CVE-2011-2113 [CRITICAL] CWE-119 CVE-2011-2113: Multiple buffer overflows in the Shockwave3DAsset component in Adobe Shockwave Player before 11.6.0.
Multiple buffer overflows in the Shockwave3DAsset component in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2009-1860P3CRITICALCVSS 9.3≤ 11.5.0.596v1.0+10 more2009-06-25
CVE-2009-1860 [CRITICAL] CVE-2009-1860: Unspecified vulnerability in Adobe Shockwave Player before 11.5.0.600 allows remote attackers to exe
Unspecified vulnerability in Adobe Shockwave Player before 11.5.0.600 allows remote attackers to execute arbitrary code via crafted Shockwave Player 10 content.
nvd
CVE-2010-4193P3CRITICALCVSS 9.3≤ 11.5.9.615v1.0+40 more2011-02-10
CVE-2010-4193 [CRITICAL] CWE-20 CVE-2010-4193: Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which al
Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.
nvd
CVE-2010-2582P3CRITICALCVSS 9.3≤ 11.5.8.612v1.0+39 more2010-10-29
CVE-2010-2582 [CRITICAL] CWE-119 CVE-2010-2582: An unspecified function in TextXtra.x32 in Adobe Shockwave Player before 11.5.9.615 does not properl
An unspecified function in TextXtra.x32 in Adobe Shockwave Player before 11.5.9.615 does not properly reallocate a buffer when processing a DEMX chunk in a Director file, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code.
nvd
CVE-2019-7100P3CRITICALCVSS 9.8≤ 12.3.4.2042019-05-23
CVE-2019-7100 [CRITICAL] CWE-787 CVE-2019-7100: Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Succe
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2019-7098P3CRITICALCVSS 9.8≤ 12.3.4.2042019-05-23
CVE-2019-7098 [CRITICAL] CWE-787 CVE-2019-7098: Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Succe
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2019-7103P3CRITICALCVSS 9.8≤ 12.3.4.2042019-05-23
CVE-2019-7103 [CRITICAL] CWE-787 CVE-2019-7103: Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Succe
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2019-7099P3CRITICALCVSS 9.8≤ 12.3.4.2042019-05-23
CVE-2019-7099 [CRITICAL] CWE-787 CVE-2019-7099: Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Succe
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2010-4307P3CRITICALCVSS 9.3≤ 11.5.9.615v1.0+40 more2011-02-10
CVE-2010-4307 [CRITICAL] CWE-119 CVE-2010-4307: Buffer overflow in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary co
Buffer overflow in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2019-7104P3CRITICALCVSS 9.8≤ 12.3.4.2042019-05-23
CVE-2019-7104 [CRITICAL] CWE-787 CVE-2019-7104: Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Succe
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2010-0130P3HIGHCVSS 8.8fixed in 11.5.7.6092010-05-13
CVE-2010-0130 [HIGH] CWE-190 CVE-2010-0130: Integer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute
Integer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via a crafted .dir (aka Director) file.
nvd
CVE-2011-2108P3CRITICALCVSS 9.3≤ 11.5.9.620v1.0+41 more2011-06-16
CVE-2011-2108 [CRITICAL] CVE-2011-2108: Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified
Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to a "design flaw."
nvd
CVE-2010-4195P3CRITICALCVSS 9.3≤ 11.5.9.615v1.0+40 more2011-02-10
CVE-2010-4195 [CRITICAL] CWE-20 CVE-2010-4195: The TextXtra module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecifi
The TextXtra module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.
nvd
CVE-2010-4196P3CRITICALCVSS 9.3≤ 11.5.9.615v1.0+40 more2011-02-10
CVE-2010-4196 [CRITICAL] CWE-20 CVE-2010-4196: The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate
The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.
nvd
CVE-2011-0555P3CRITICALCVSS 9.3≤ 11.5.9.615v1.0+40 more2011-02-10
CVE-2011-0555 [CRITICAL] CVE-2011-0555: The TextXtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execu
The TextXtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a Director file with a crafted DEMX RIFF chunk that triggers incorrect buffer allocation, a different vulnerability than CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, CV
nvd