Adobe Shockwave Player

ソフト名：Adobe Shockwave Player 11.6.0.626以下

回避策：アップデートにて対応

脆弱性：システムアクセス, 不特定のエラー, メモリ破壊, リモートコード実行

ソース：

http://www.adobe.com/products/shockwaveplayer/

http://www.adobe.com/support/security/bulletins/apsb11-19.html

http://secunia.com/advisories/45584/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4308

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4309

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2419

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2420

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2421

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2422

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2423

CVE：CVE-2010-4308, CVE-2010-4309, CVE-2011-2419, CVE-2011-2420, CVE-2011-2421, CVE-2011-2422, CVE-2011-2423

危険性：High Risk

Adobe Shockwave Player

ソフト名：Adobe Shockwave Player 11.5.9.620

回避策：APSB11-17, 11.6.0.626へのアップデートにて対応

脆弱性：システムアクセス, 不特定のエラー, メモリ破壊, 入力検証エラー, 整数オーバーフローエラー, バッファオーバーフロー, バウンダリエラー, 整数アンダーフローエラー, リモートコード実行

ソース：http://www.adobe.com/products/shockwaveplayer/

http://www.adobe.com/support/security/bulletins/apsb11-17.html

http://secunia.com/secunia_research/2011-40/

http://secunia.com/secunia_research/2011-42/

http://secunia.com/secunia_research/2011-43/

http://secunia.com/secunia_research/2011-44/

http://secunia.com/secunia_research/2011-45/

http://secunia.com/secunia_research/2011-46/

http://secunia.com/secunia_research/2011-47/

http://www.zerodayinitiative.com/advisories/ZDI-11-200/

http://www.zerodayinitiative.com/advisories/ZDI-11-201/

http://www.zerodayinitiative.com/advisories/ZDI-11-202/

http://www.zerodayinitiative.com/advisories/ZDI-11-203/

http://www.zerodayinitiative.com/advisories/ZDI-11-204/

http://www.zerodayinitiative.com/advisories/ZDI-11-205/

http://www.zerodayinitiative.com/advisories/ZDI-11-206/

http://www.zerodayinitiative.com/advisories/ZDI-11-207/

http://www.zerodayinitiative.com/advisories/ZDI-11-208/

http://www.zerodayinitiative.com/advisories/ZDI-11-209/

http://www.zerodayinitiative.com/advisories/ZDI-11-210/

http://www.zerodayinitiative.com/advisories/ZDI-11-211/

http://www.zerodayinitiative.com/advisories/ZDI-11-212/

http://www.zerodayinitiative.com/advisories/ZDI-11-213/

http://www.zerodayinitiative.com/advisories/ZDI-11-214/

http://www.zerodayinitiative.com/advisories/ZDI-11-215/

http://www.zerodayinitiative.com/advisories/ZDI-11-216/

http://www.zerodayinitiative.com/advisories/ZDI-11-217/

http://www.zerodayinitiative.com/advisories/ZDI-11-220/

http://www.zerodayinitiative.com/advisories/ZDI-11-221/

http://www.zerodayinitiative.com/advisories/ZDI-11-222/

http://dvlabs.tippingpoint.com/advisory/TPTI-11-07

http://dvlabs.tippingpoint.com/advisory/TPTI-11-08

http://dvlabs.tippingpoint.com/advisory/TPTI-11-09

http://dvlabs.tippingpoint.com/advisory/TPTI-11-10

http://dvlabs.tippingpoint.com/advisory/TPTI-11-11

http://secunia.com/advisories/43811/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0317

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0318

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0319

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0320

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0335

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2108

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2109

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2111

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2112

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2113

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2114

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2115

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2116

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2117

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2118

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2119

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2120

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2121

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2122

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2123

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2124

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2125

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2126

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2127

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2128

CVE：CVE-2011-0317, CVE-2011-0318, CVE-2011-0319, CVE-2011-0320, CVE-2011-0335, CVE-2011-2108, CVE-2011-2109, CVE-2011-2111, CVE-2011-2112, CVE-2011-2113, CVE-2011-2114, CVE-2011-2115, CVE-2011-2116, CVE-2011-2117, CVE-2011-2118, CVE-2011-2119, CVE-2011-2120, CVE-2011-2121, CVE-2011-2122, CVE-2011-2123, CVE-2011-2124, CVE-2011-2125, CVE-2011-2126, CVE-2011-2127, CVE-2011-2128

危険性：High Risk

Adobe Shockwave Player

ソフト名：Adobe Shockwave Player 11.5.9.615
回避策：未対応
脆弱性：リモートコード実行
ソース：http://www.adobe.com/products/shockwaveplayer/
http://www.securityfocus.com/bid/44617
http://secunia.com/advisories/42112
危険性：High Risk

Adobe Shockwave Player

ソフト名：Adobe Shockwave Player 11.5.8.612
回避策：APSB10-25にて対応
脆弱性：リモートコード実行, バッファオーバーフロー, メモリ破壊, アプリケーションのクラッシュ
ソース：http://www.adobe.com/support/security/bulletins/apsb10-25.html
http://www.securityfocus.com/bid/44512
http://www.securityfocus.com/bid/44513
http://www.securityfocus.com/bid/44514
http://www.securityfocus.com/bid/44515
http://www.securityfocus.com/bid/44516
http://www.securityfocus.com/bid/44517
http://www.securityfocus.com/bid/44518
http://www.securityfocus.com/bid/44519
http://www.securityfocus.com/bid/44520
http://www.securityfocus.com/bid/44521
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2581
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2582
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3655
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4084
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4085
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4086
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4087
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4088
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4089
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4090
http://www.vupen.com/english/advisories/2010/2826
CVE：CVE-2010-2581, CVE-2010-2582, CVE-2010-3655, CVE-2010-4084, CVE-2010-4085, CVE-2010-4086, CVE-2010-4087, CVE-2010-4088, CVE-2010-4089, CVE-2010-4090
危険性：High Risk

Adobe Shockwave Player

ソフト名：Adobe Shockwave Player 11.5.8.612
回避策：未対応
脆弱性：リモートコード実行, メモリ破壊, アプリケーションのクラッシュ
ソース：http://www.adobe.com/products/shockwaveplayer/
http://www.exploit-db.com/exploits/15296/
http://www.securityfocus.com/bid/44291
http://www.vupen.com/english/advisories/2010/2752
危険性：High Risk

Adobe Shockwave Player

ソフト名：Adobe Shockwave Player 11.5.7.609
回避策：APSB10-20にて対応
脆弱性：特定されていない脆弱性, バッファオーバーフロー, 整数オーバーフロー, ヒープオーバーフロー, リモートコード実行, ポインタエラー, メモリ破壊, アプリケーションのクラッシュ, NULL値の書き込み
ソース：http://www.adobe.com/support/security/bulletins/apsb10-20.html
http://dvlabs.tippingpoint.com/advisory/TPTI-10-09
http://dvlabs.tippingpoint.com/advisory/TPTI-10-10
http://dvlabs.tippingpoint.com/advisory/TPTI-10-11
http://dvlabs.tippingpoint.com/advisory/TPTI-10-12
http://dvlabs.tippingpoint.com/advisory/TPTI-10-13
http://dvlabs.tippingpoint.com/advisory/TPTI-10-14
http://dvlabs.tippingpoint.com/advisory/TPTI-10-15
http://www.zerodayinitiative.com/advisories/ZDI-10-160/
http://www.zerodayinitiative.com/advisories/ZDI-10-161/
http://www.zerodayinitiative.com/advisories/ZDI-10-162/
http://www.zerodayinitiative.com/advisories/ZDI-10-163/
http://www.zerodayinitiative.com/advisories/ZDI-10-164/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2863
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2864
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2865
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2866
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2867
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2868
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2869
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2870
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2871
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2872
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2873
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2874
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2875
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2876
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2877
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2878
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2879
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2881
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2882
http://secunia.com/advisories/41065
http://www.vupen.com/english/advisories/2010/2176
CVE：CVE-2010-2863, CVE-2010-2864, CVE-2010-2865, CVE-2010-2866, CVE-2010-2867, CVE-2010-2868, CVE-2010-2869, CVE-2010-2870, CVE-2010-2871, CVE-2010-2872, CVE-2010-2873, CVE-2010-2874, CVE-2010-2875, CVE-2010-2876, CVE-2010-2877, CVE-2010-2878, CVE-2010-2879, CVE-2010-2880, CVE-2010-2881, CVE-2010-2882
危険性：High Risk

Adobe Shockwave Player

ソフト名：Adobe Shockwave Player 11.5.6.606
回避策：APSB10-12にて対応
脆弱性：バッファオーバーフロー, アプリケーションのクラッシュ, リモートコード実行, 整数オーバーフロー, エンドレスループ, 特定されていない脆弱性
ソース：http://www.adobe.com/support/security/bulletins/apsb10-12.html
http://www.exploit-db.com/exploits/12578
http://www.securityfocus.com/bid/40076
http://www.securityfocus.com/bid/40077
http://www.securityfocus.com/bid/40078
http://www.securityfocus.com/bid/40079
http://www.securityfocus.com/bid/40081
http://www.securityfocus.com/bid/40082
http://www.securityfocus.com/bid/40083
http://www.securityfocus.com/bid/40084
http://www.securityfocus.com/bid/40085
http://www.securityfocus.com/bid/40086
http://www.securityfocus.com/bid/40087
http://www.securityfocus.com/bid/40088
http://www.securityfocus.com/bid/40089
http://www.securityfocus.com/bid/40090
http://www.securityfocus.com/bid/40091
http://www.securityfocus.com/bid/40093
http://www.securityfocus.com/bid/40094
http://www.securityfocus.com/bid/40096
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0127
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0128
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0129
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0130
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0986
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0987
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1280
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1281
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1282
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1283
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1284
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1286
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1287
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1288
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1289
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1290
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1291
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1292
http://secunia.com/advisories/38751
CVE：CVE-2010-0127, CVE-2010-0128, CVE-2010-0129, CVE-2010-0130, CVE-2010-0986, CVE-2010-0987, CVE-2010-1280, CVE-2010-1281, CVE-2010-1282, CVE-2010-1283, CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1288, CVE-2010-1289, CVE-2010-1290, CVE-2010-1291, CVE-2010-1292
危険性：High Risk