Total vulnerabilities in the database
The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file.
| Software | From | Fixed in |
|---|---|---|
| adobe / shockwave_player | - | 11.5.6.606.x |
| adobe / shockwave_player | 1.0 | 1.0.x |
| adobe / shockwave_player | 2.0 | 2.0.x |
| adobe / shockwave_player | 3.0 | 3.0.x |
| adobe / shockwave_player | 4.0 | 4.0.x |
| adobe / shockwave_player | 5.0 | 5.0.x |
| adobe / shockwave_player | 6.0 | 6.0.x |
| adobe / shockwave_player | 8.0 | 8.0.x |
| adobe / shockwave_player | 8.5.1 | 8.5.1.x |
| adobe / shockwave_player | 9 | 9.x |
| adobe / shockwave_player | 10.1.0.11 | 10.1.0.11.x |
| adobe / shockwave_player | 11.0.0.456 | 11.0.0.456.x |
| adobe / shockwave_player | 11.5.0.595 | 11.5.0.595.x |
| adobe / shockwave_player | 11.5.0.596 | 11.5.0.596.x |
| adobe / shockwave_player | 11.5.1.601 | 11.5.1.601.x |
| adobe / shockwave_player | 11.5.2.602 | 11.5.2.602.x |