CVEvulnerability
CVE-2005-3525
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and earlier allows remote attackers to execute arbitrary code via crafted large values for unspecified parameters.
Affected configurations
• adobe shockwave player 1.0
• adobe shockwave player 2.0
• adobe shockwave player 3.0
• adobe shockwave player 4.0
• adobe shockwave player 5.0
• adobe shockwave player 6.0
• adobe shockwave player 8.0
• adobe shockwave player 8.5.1
• adobe shockwave player 10.1.0.11
References
- http://secunia.com/advisories/19009 Vendor Advisory
- http://securityreason.com/securityalert/481 securityreason.com
- http://securitytracker.com/id?1015673 securitytracker.com
- http://www.kb.cert.org/vuls/id/437212 US Government Resource
- http://www.macromedia.com/devnet/security/security_zone/apsb06-02.html www.macromedia.com
- http://www.osvdb.org/23461 www.osvdb.org
- http://www.securityfocus.com/archive/1/425900/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16791 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0716 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-06-002.html www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24914 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/19009 Vendor Advisory
- http://securityreason.com/securityalert/481 securityreason.com
- http://securitytracker.com/id?1015673 securitytracker.com
- http://www.kb.cert.org/vuls/id/437212 US Government Resource
- http://www.macromedia.com/devnet/security/security_zone/apsb06-02.html www.macromedia.com
- http://www.osvdb.org/23461 www.osvdb.org
- http://www.securityfocus.com/archive/1/425900/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16791 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0716 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-06-002.html www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24914 exchange.xforce.ibmcloud.com