Priority HIGH 79
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chu…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.74626 · Published 2010-10-26 · No fix listed CWE-119
Priority HIGH 67
Stack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument to the ShockwaveVersion metho…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.32338 · Published 2007-11-14 · No fix listed CWE-119
Priority MEDIUM 60
Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, C…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.18144 · Published 2012-05-09 · No fix listed CWE-119
Priority MEDIUM 59
Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PlayerVersi…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.20405 · Published 2009-09-18 · No fix listed CWE-119
Priority MEDIUM 58
Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and earlier allows remote attackers to execute arbitrary code via crafted large values for unspecified p…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.19657 · Published 2006-02-23 · No fix listed
Priority MEDIUM 55
Stack-based buffer overflow in Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code via unspecified vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09275 · Published 2013-02-13 · No fix listed CWE-119
Priority MEDIUM 55
Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4174, and CVE-2012-527…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09568 · Published 2012-10-23 · No fix listed CWE-119
Priority MEDIUM 55
Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4175, and CVE-2012-527…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09568 · Published 2012-10-23 · No fix listed CWE-119
Priority MEDIUM 55
Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4174, CVE-2012-4175, and CVE-2012-527…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09568 · Published 2012-10-23 · No fix listed CWE-119
Priority MEDIUM 55
Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4173, CVE-2012-4174, CVE-2012-4175, and CVE-2012-527…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09693 · Published 2012-10-23 · No fix listed CWE-119
Priority MEDIUM 55
Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a count value associated wi…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.13014 · Published 2010-08-26 · No fix listed CWE-189
Priority MEDIUM 55
Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file, related to (1) an erroneous dereference…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.16637 · Published 2010-05-13 · No fix listed CWE-787
Priority MEDIUM 54
Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4174, and CVE-2012-417…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08579 · Published 2012-10-23 · No fix listed CWE-119
Priority MEDIUM 53
Array index error in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07317 · Published 2012-10-23 · No fix listed CWE-20
Priority MEDIUM 52
Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06875 · Published 2017-06-20 · No fix listed CWE-119
Priority MEDIUM 52
Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0500.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05972 · Published 2014-02-12 · No fix listed CWE-119
Priority MEDIUM 52
Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0501.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05894 · Published 2014-02-12 · No fix listed CWE-119
Priority MEDIUM 52
Buffer overflow in Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code via unspecified vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05967 · Published 2013-04-10 · No fix listed CWE-119
Priority MEDIUM 52
Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2031, C…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06169 · Published 2012-05-09 · No fix listed CWE-119
Priority MEDIUM 52
Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2030, CVE-2012-2031, C…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0625 · Published 2012-05-09 · No fix listed CWE-119
Priority MEDIUM 52
Heap-based buffer overflow in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code via unspecified vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05926 · Published 2012-02-15 · No fix listed CWE-119
Priority MEDIUM 52
msvcr90.dll in Adobe Shockwave Player before 11.6.1.629 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06488 · Published 2011-08-11 · No fix listed CWE-119
Priority MEDIUM 51
Adobe Shockwave Player before 12.2.0.162 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-6680.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05603 · Published 2015-09-09 · No fix listed CWE-119
Priority MEDIUM 51
Adobe Shockwave Player before 12.2.0.162 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-6681.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05095 · Published 2015-09-09 · No fix listed
Priority MEDIUM 51
Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05344 · Published 2013-02-13 · No fix listed CWE-119
Load more