Shockwave Player (Adobe) - vulnerabilities (CVEs)

174 CVEs, 0 in the last 30 days, 82 known versions, newest CVE from 2019-05-23. Vendor: Adobe.

CVEs of Shockwave Player

CVE-2019-7102 - CVSS 9.8 (critical), 2019-05-23: Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7098 - CVSS 9.8 (critical), 2019-05-23: Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7101 - CVSS 9.8 (critical), 2019-05-23: Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7100 - CVSS 9.8 (critical), 2019-05-23: Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7103 - CVSS 9.8 (critical), 2019-05-23: Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7099 - CVSS 9.8 (critical), 2019-05-23: Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7104 - CVSS 9.8 (critical), 2019-05-23: Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2012-0771 - CVSS 8.8 (high), 2018-02-19: Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2017-3086 - CVSS 9.8 (critical), 2017-06-20: Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code…
CVE-2017-2983 - CVSS 7.8 (high), 2017-03-14: Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to…
CVE-2015-7649 - CVSS 10 (critical), 2015-10-28: Adobe Shockwave Player before 12.2.1.171 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-6681 - CVSS 10 (critical), 2015-09-09: Adobe Shockwave Player before 12.2.0.162 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2015-6680 - CVSS 10 (critical), 2015-09-09: Adobe Shockwave Player before 12.2.0.162 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2015-5121 - CVSS 10 (critical), 2015-07-14: Adobe Shockwave Player before 12.1.9.159 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2015-5120 - CVSS 10 (critical), 2015-07-14: Adobe Shockwave Player before 12.1.9.159 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2014-0505 - CVSS 10 (critical), 2014-03-14: Adobe Shockwave Player before 12.1.0.150 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified…
CVE-2014-0500 - CVSS 10 (critical), 2014-02-12: Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified…
CVE-2014-0501 - CVSS 10 (critical), 2014-02-12: Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified…
CVE-2013-5334 - CVSS 10 (critical), 2013-12-11: Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2013-5333 - CVSS 10 (critical), 2013-12-11: Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2013-3359 - CVSS 10 (critical), 2013-09-12: Adobe Shockwave Player before 12.0.4.144 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2013-3360 - CVSS 10 (critical), 2013-09-12: Adobe Shockwave Player before 12.0.4.144 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2013-3348 - CVSS 10 (critical), 2013-07-10: Adobe Shockwave Player before 12.0.3.133 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2013-1385 - CVSS 10 (critical), 2013-04-10: Adobe Shockwave Player before 12.0.2.122 does not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection…
CVE-2013-1384 - CVSS 10 (critical), 2013-04-10: Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2013-1383 - CVSS 10 (critical), 2013-04-10: Buffer overflow in Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2013-1386 - CVSS 10 (critical), 2013-04-10: Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2013-0636 - CVSS 10 (critical), 2013-02-13: Stack-based buffer overflow in Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2013-0635 - CVSS 10 (critical), 2013-02-13: Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2012-6271 - CVSS 9.3 (critical), 2012-12-20: Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie that contains an…
CVE-2012-6270 - CVSS 9.3 (critical), 2012-12-20: Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of a Shockwave Player 10.4.0.025 compatibility feature via a crafted…
CVE-2012-4175 - CVSS 10 (critical), 2012-10-23: Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than…
CVE-2012-4174 - CVSS 10 (critical), 2012-10-23: Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than…
CVE-2012-5273 - CVSS 10 (critical), 2012-10-23: Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than…
CVE-2012-4173 - CVSS 10 (critical), 2012-10-23: Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than…
CVE-2012-4176 - CVSS 10 (critical), 2012-10-23: Array index error in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2012-4172 - CVSS 10 (critical), 2012-10-23: Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than…
CVE-2012-2044 - CVSS 10 (critical), 2012-08-15: Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2012-2047 - CVSS 10 (critical), 2012-08-15: Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2012-2043 - CVSS 10 (critical), 2012-08-15: Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2012-2046 - CVSS 10 (critical), 2012-08-15: Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2012-2045 - CVSS 10 (critical), 2012-08-15: Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2012-2029 - CVSS 10 (critical), 2012-05-09: Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2012-2032 - CVSS 10 (critical), 2012-05-09: Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2012-2031 - CVSS 10 (critical), 2012-05-09: Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2012-2030 - CVSS 10 (critical), 2012-05-09: Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2012-2033 - CVSS 10 (critical), 2012-05-09: Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2012-0763 - CVSS 10 (critical), 2012-02-15: The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2012-0759 - CVSS 10 (critical), 2012-02-15: Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2012-0762 - CVSS 10 (critical), 2012-02-15: The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2012-0766 - CVSS 10 (critical), 2012-02-15: The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2012-0761 - CVSS 10 (critical), 2012-02-15: The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2012-0764 - CVSS 10 (critical), 2012-02-15: The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2012-0760 - CVSS 10 (critical), 2012-02-15: The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2012-0758 - CVSS 10 (critical), 2012-02-15: Heap-based buffer overflow in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2012-0757 - CVSS 10 (critical), 2012-02-15: The Shockwave 3D Asset component in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2011-2446 - CVSS 10 (critical), 2011-11-08: The DIRapi library in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
CVE-2011-2449 - CVSS 10 (critical), 2011-11-08: The TextXtra module in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service (memory corruption)…
CVE-2011-2448 - CVSS 10 (critical), 2011-11-08: The DIRapi library in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
CVE-2011-2447 - CVSS 10 (critical), 2011-11-08: Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2011-2421 - CVSS 9.3 (critical), 2011-08-11: Dirapi.dll in Adobe Shockwave Player before 11.6.1.629 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
CVE-2011-2420 - CVSS 10 (critical), 2011-08-11: Adobe Shockwave Player before 11.6.1.629 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified…
CVE-2011-2423 - CVSS 10 (critical), 2011-08-11: msvcr90.dll in Adobe Shockwave Player before 11.6.1.629 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
CVE-2011-2419 - CVSS 10 (critical), 2011-08-11: IML32.dll in Adobe Shockwave Player before 11.6.1.629 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
CVE-2011-2422 - CVSS 10 (critical), 2011-08-11: Textra.x32 in Adobe Shockwave Player before 11.6.1.629 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
CVE-2010-4309 - CVSS 10 (critical), 2011-08-11: Adobe Shockwave Player before 11.6.1.629 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2010-4308 - CVSS 10 (critical), 2011-08-11: Adobe Shockwave Player before 11.6.1.629 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2011-2114 - CVSS 9.3 (critical), 2011-06-16: Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2011-2117 - CVSS 9.3 (critical), 2011-06-16: Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2011-2120 - CVSS 9.3 (critical), 2011-06-16: Integer overflow in the CursorAsset x32 component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified…
CVE-2011-2123 - CVSS 9.3 (critical), 2011-06-16: Integer overflow in the Shockwave 3D Asset x32 component in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code via a…
CVE-2011-2126 - CVSS 9.3 (critical), 2011-06-16: Buffer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2109 - CVSS 9.3 (critical), 2011-06-16: Multiple integer overflows in Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2113 - CVSS 9.3 (critical), 2011-06-16: Multiple buffer overflows in the Shockwave3DAsset component in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary code via…
CVE-2011-2116 - CVSS 9.3 (critical), 2011-06-16: IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
CVE-2011-2119 - CVSS 9.3 (critical), 2011-06-16: Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
CVE-2011-2122 - CVSS 9.3 (critical), 2011-06-16: Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
CVE-2011-2125 - CVSS 9.3 (critical), 2011-06-16: Buffer overflow in Dirapix.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2108 - CVSS 9.3 (critical), 2011-06-16: Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to a "design flaw."
CVE-2011-2128 - CVSS 9.3 (critical), 2011-06-16: Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2011-2112 - CVSS 9.3 (critical), 2011-06-16: Multiple buffer overflows in IML32.dll in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2115 - CVSS 9.3 (critical), 2011-06-16: IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
CVE-2011-2118 - CVSS 9.3 (critical), 2011-06-16: The FLV ASSET Xtra component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to an…
CVE-2011-2121 - CVSS 9.3 (critical), 2011-06-16: Integer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2011-2124 - CVSS 9.3 (critical), 2011-06-16: Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2011-2127 - CVSS 9.3 (critical), 2011-06-16: Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2011-2111 - CVSS 9.3 (critical), 2011-06-16: IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
CVE-2011-0317 - CVSS 9.3 (critical), 2011-06-16: Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
CVE-2011-0320 - CVSS 9.3 (critical), 2011-06-16: Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
CVE-2011-0319 - CVSS 9.3 (critical), 2011-06-16: Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
CVE-2011-0318 - CVSS 9.3 (critical), 2011-06-16: Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
CVE-2011-0335 - CVSS 9.3 (critical), 2011-06-16: Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
CVE-2011-0556 - CVSS 9.3 (critical), 2011-02-10: The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2011-0555 - CVSS 9.3 (critical), 2011-02-10: The TextXtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code or cause a denial of service (heap…
CVE-2011-0569 - CVSS 9.3 (critical), 2011-02-10: The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2011-0557 - CVSS 9.3 (critical), 2011-02-10: Integer overflow in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code via a Director movie with a large count value…
CVE-2010-4306 - CVSS 9.3 (critical), 2011-02-10: Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors,…
CVE-2010-4193 - CVSS 9.3 (critical), 2011-02-10: Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown…
CVE-2010-4196 - CVSS 9.3 (critical), 2011-02-10: The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute…
CVE-2010-4192 - CVSS 9.3 (critical), 2011-02-10: Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with…