Recent from talks
Nothing was collected or created yet.
Adobe Shockwave Player
View on Wikipedia
| Adobe Shockwave Player | |
|---|---|
![]() | |
| Original author | Macromedia |
| Developer | Adobe Inc. |
| Final release | 12.3.5.205 (Win)
/ March 15, 2019[1] |
| Operating system | Microsoft Windows, macOS |
| Platform | Web browsers |
| Type | Multimedia Player / MIME type: application/x-director |
| License | Freeware |
| Website | helpx |
Adobe Shockwave Player (formerly Macromedia Shockwave Player, and also known as Shockwave for Director) is a discontinued software plug-in for web browsers enabling interaction with multimedia and video games created for the Adobe Shockwave platform on web pages. Content developed with Director and published on the Internet could be viewed on any computer with the freeware plug-in installed. First developed by Macromedia and released in 1995, it was later acquired along with other Macromedia assets by Adobe Systems in 2005.[2]
Shockwave Player ran DCR files published by the Adobe Director environment. Shockwave Player supported raster graphics, basic vector graphics, 3D graphics, audio, and an embedded scripting language called Lingo.[3][4] Hundreds of free online video games were developed using Shockwave, and published on websites such as Miniclip and Shockwave.com.[5]
As of July 2011, a survey found that Flash Player had 99% market penetration in desktop browsers in "mature markets" (United States, Canada, United Kingdom, France, Germany, Japan, Australia, and New Zealand), while Shockwave Player claimed only 41% in these markets.[6] Flash Player was used as an alternative to Shockwave Player, with its more advanced 3D rendering capabilities and object-oriented programming language. Flash Player cannot display Shockwave content, and Shockwave Player cannot display Flash content.[7]
In February 2019, Adobe announced that Adobe Shockwave, including the Shockwave Player, would be discontinued in April 2019.[8] The final update for Adobe Shockwave Player was released on March 15, 2019. Shockwave Player is no longer available for download (as of October 8, 2019),[8] and most major web browsers blocked the Shockwave Player plug-in from being used upon its discontinuation.[9]
History
[edit]The Shockwave player was originally developed for the Netscape browser by Macromedia Director team members Harry Chesley, John Newlin, Sarah Allen, and Ken Day, influenced by a previous plug-in that Macromedia had created for Microsoft's Blackbird. Version 1.0 of Shockwave was released independent of Director 4 and its development schedule has coincided with the release of Director since version 5.[citation needed] Its version has since been tied to Director's, thus there were no Shockwave 2–4 releases.
- Shockwave 1
- The Shockwave plug-in for Netscape Navigator 2.0 was released in 1995, along with the stand-alone Afterburner utility to compress Director files for Shockwave playback. The first large-scale multimedia site to use Shockwave was Intel's 25th Anniversary of the Microprocessor.[10]
- Shockwave 5
- Afterburner is integrated into the Director 5.0 authoring tool as an Xtra.
- Shockwave 6
- Added support for Shockwave Audio (swa) which consisted of the emerging MP3 file format with some additional headers.
- Shockwave 7
- Added support for linked media, including images and casts.
- Added support for Shockwave Multiuser Server.
- Shockwave 8.5
- Added support for Intel's 3D technologies, including rendering.
- Shockwave 9
- Shockwave 10
- Last version to support Mac OS X 10.3 and lower, and Mac OS 9.
- Shockwave 11
- Added support for Intel-based Macs.
- Shockwave 12
- Shockwave 12.1
- It is supported by 32-bit and 64-bit versions of Windows XP, Vista, 7, and 8. It has content made from previous versions as well as Director MX 2004. From version 12.1.5.155 Shockwave is supported in both Internet Explorer and Mozilla Firefox.[11]
- Shockwave 12.2
- Last update for macOS before discontinuation.
- Shockwave 12.3
- Last update before overall discontinuation.
Platform support
[edit]Shockwave was available as a plug-in for the classic Mac OS, macOS, and 32 bit Windows for most of its history. However, there was a notable break in support for the Macintosh between January 2006 (when Apple Inc. began the Mac transition to Intel processors based on the Intel Core Duo) and March 2008 (when Adobe Systems released Shockwave 11, the first version to run natively on Intel Macs).
Unlike Flash Player, Shockwave Player is not available for Linux or Solaris despite intense lobbying efforts. However, the Shockwave Player can be installed on Linux with CrossOver (or by running a Windows version of a supported browser in Wine with varying degrees of success). It is also possible to use Shockwave Player in the native Linux version of Firefox by using the Pipelight plugin (which is based on a modified version of Wine).
In 2017, the authoring tool for Shockwave content, Adobe Director, was discontinued on February 1; and the following month, Shockwave Player for macOS was officially discontinued. In February 2019, Adobe announced that Shockwave Player would be officially discontinued and unsupported on Microsoft Windows, the last OS that supported the Shockwave Player, effective April 9, 2019.[8]
Security
[edit]Some security experts advise users to uninstall Adobe Shockwave Player because "it bundles a component of Adobe Flash that is more than 15 months behind on security updates, and which can be used to backdoor virtually any computer running it", in the words of Brian Krebs. This opinion is based on research by Will Dormann, who goes on to say that Shockwave is architecturally flawed because it contains a separate version of the Flash runtime that is updated much less often than Flash itself.[12] Additionally Krebs writes that "Shockwave has several modules that don't opt in to trivial exploit mitigation techniques built into Microsoft Windows, such as SafeSEH."[13][14]
Branding and name confusion
[edit]In an attempt to raise its brand profile, all Macromedia players prefixed Shockwave to their names in the late 1990s. Although this campaign was successful and helped establish Shockwave Flash as a multimedia plugin,[citation needed] Shockwave and Flash became more difficult to maintain as separate products. In 2005, Macromedia marketed three distinct browser player plugins under the brand names Macromedia Authorware, Macromedia Shockwave, and Macromedia Flash.
Macromedia also released a web browser plug-in for viewing Macromedia FreeHand files online. It was branded Macromedia Shockwave for FreeHand and displayed specially compressed .fhc Freehand files.[15]
Later, with the acquisition of Macromedia, Adobe Systems slowly began to rebrand all products related to Shockwave.[clarification needed]
See also
[edit]References
[edit]- ^ "Adobe Shockwave Player". April 10, 2019. Retrieved April 10, 2019.
- ^ Elia, Eric (1996). "Macromedia unveils Shockwave and Director 5". Newmedia. HyperMedia Communications. ISSN 1060-7188. Retrieved September 23, 2010.
- ^ Macromedia Shockwave for Director User's Guide, Volume 1, New Riders Pub., January 1, 1996
- ^ Macromedia Shockwave for Director, Volume 1, Hayden Books, 1996
- ^ "Shockwave.com". Archived from the original on May 28, 2015. Retrieved May 28, 2015.
- ^ "Flash content reaches 99% of Internet viewers". Adobe. Archived from the original on October 2, 2011. Retrieved August 7, 2014.
- ^ "What is Adobe Flash Player | FAQ | Adobe Flash Player".
- ^ a b c "End of Life (EOL) for Adobe Shockwave". helpx.adobe.com. Retrieved December 23, 2019.
- ^ Hoffman, Chris. "End of an Era: Adobe Shockwave Dies Today". How-To Geek. Retrieved December 23, 2019.
- ^ "Intel's 25th Anniversary of the Microprocessor". Archived from the original on January 3, 1997.
- ^ "LANDESK Patch News Bulletin: Adobe has Released Shockwave Player Version 12.1.1.151(executable install) for Windows 24-APR-2014". Landesk. Retrieved May 7, 2014.
- ^ Pauli, Darren (May 23, 2014). "Shockwave shocker: Plugin includes un-patched version of Flash". The Register. Archived from the original on May 23, 2014.
- ^ Krebs, Brian (May 21, 2014). "Why You Should Ditch Adobe Shockwave". Krebs on Security blog. Archived from the original on May 25, 2014.
- ^ Goodin, Dan (May 21, 2014). "Adobe Shockwave bundles Flash that's 15 months behind on security fixes". Ars Technica. Archived from the original on May 22, 2014.
- ^ Perry Board; Rick Luna; Derek O'Dell (1996). "Chapter 20 - Shockwave for Freehand". Creating Shockwave Web Pages. Que Corporation. ISBN 0-7897-0903-1. Archived from the original on February 9, 2008. Retrieved March 30, 2008.
External links
[edit]- Adobe Shockwave Player
- Adobe.com/Technote Adobe.com/Technote using The Wayback Machine - What's the difference between Shockwave and Flash? (dated 2004)
- How Stuff Works - The Difference Between Flash and Shockwave
Adobe Shockwave Player
View on GrokipediaOverview and Origins
Core Concept and Purpose
Adobe Shockwave Player was a freeware browser plugin developed by Macromedia and first released in 1995 to enable the playback of interactive multimedia content within web browsers.[6]It served as the runtime environment for files generated by Macromedia Director, specifically in the compressed .DCR (Director Compressed Resource) format, allowing users to experience rich, non-streaming multimedia elements directly on websites without requiring standalone software.[7]
The plugin's primary purpose was to deliver engaging web experiences through animations, interactive games, presentations, and other vector- and raster-based content, filling a gap in early internet capabilities for dynamic interactivity beyond static HTML.[6] Shockwave Player's initial release was closely tied to Netscape Navigator 2.0, one of the dominant browsers of the mid-1990s, making it accessible to a wide audience of early web users seeking enhanced multimedia integration.[6]
This launch marked a significant advancement in web technology, as it compressed and optimized Director projects for efficient online delivery, supporting features like high-impact graphics and synchronized audio without overwhelming dial-up connections.[8] At its core, Shockwave Player complemented Adobe Director, the professional authoring tool used to create compatible content, which employed the Lingo scripting language to add programmable interactivity, event handling, and logic to multimedia projects.[9]
Lingo enabled developers to script behaviors such as user responses, transitions, and data manipulation, transforming static media into responsive applications playable via the Shockwave plugin.[10]
Following Macromedia's acquisition by Adobe in 2005, the player continued under Adobe's branding until its discontinuation, but its foundational role in web multimedia remained rooted in the 1995 innovations.[11]
Early Development and Macromedia Era
Macromedia, Inc., founded the development of Shockwave Player as an extension of its Director multimedia authoring software, with the first version, Shockwave 1.0, released in June 1995 to enable web-based playback of interactive content originally designed for CD-ROMs.[12] Shockwave 1.0 debuted publicly on Intel's 25th Anniversary of the Microprocessor website.[13] This initial release allowed users to view compressed Director files (.dcr) in web browsers like Netscape Navigator, marking one of the earliest instances of rich multimedia delivery over the internet.[12] Key milestones in the Macromedia era included significant enhancements to performance and media support. In 1996, Shockwave 5 integrated the Afterburner compression tool, which optimized rendering speeds for web delivery by reducing file sizes without substantial quality loss.[14] By 1998, Shockwave 6 introduced support for MP3 audio via the Shockwave Audio (SWA) format, enabling higher-quality sound integration for interactive experiences. Shockwave 7, released in 2000, added capabilities for linking external media files, allowing developers to stream or reference content beyond the core .dcr file.[13] In 2001, version 8.5 brought 3D graphics to the forefront with the integration of the Havok physics engine, facilitating realistic simulations for games and applications directly in browsers.[15] Later updates, including Shockwave 9 in 2005 and 10 in 2006, included enhancements to support newer platforms and authoring features from Director.[16] Macromedia's strategy emphasized widespread adoption by bundling the Shockwave Player with major browsers like Netscape and Internet Explorer, while also promoting its use for CD-ROM distribution to bridge offline and online multimedia.[12] This dual approach positioned Shockwave as a versatile platform for developers creating educational, entertainment, and marketing content. The era culminated in Adobe Systems' acquisition of Macromedia on December 3, 2005, for $3.4 billion in an all-stock transaction, which integrated Shockwave into Adobe's portfolio and initiated rebranding efforts under the Adobe name.[17]Technical Specifications
Key Features and Capabilities
The Adobe Shockwave Player featured a robust rendering engine capable of processing raster graphics, vector elements, and 3D content through the integration of Director's Xtra extensions, enabling the display of complex multimedia scenes within web browsers.[18] This engine supported hardware-accelerated 3D rendering via options such as OpenGL or DirectX, with configurable renderers like #software for compatibility or #openGL for enhanced performance, allowing for the manipulation of models, lights, cameras, and shaders in real-time.[18] Texture management included support for formats like #rgba8888, bilinear filtering, and compression to optimize visual quality and speed, while features like fog effects and anti-aliasing further enhanced scene realism without requiring extensive computational resources.[18] At the core of interactivity was Lingo, an object-oriented scripting language that allowed developers to define behaviors, handle events, and control multimedia elements within Shockwave content.[18] Lingo supported event-driven programming through handlers such as on mouseDown for click responses or on keyDown for keyboard input, enabling dynamic user interactions like object manipulation or navigation.[18] It facilitated animations via sprite and frame management, including the puppetSprite command for temporary control of graphic elements and motion blending for smooth transitions, while sound synchronization was achieved through precise timing with events like prepareFrame to align audio playback with visual cues.[18] The player extended its capabilities through third-party Xtras, which were plug-in modules integrated via Lingo to add advanced effects such as video playback or networking functionality.[18] These Xtras, managed with commands like openXlib, allowed for asynchronous operations and custom extensions, broadening the scope of interactive applications without altering the core engine.[18] For performance, optimizations included the Afterburner utility, which compressed Director movies into DCR files by up to 60%, reducing file sizes for faster web delivery while maintaining playback fidelity through on-the-fly decompression.[19][8]Media Formats and Authoring Tools
Adobe Shockwave Player primarily handles Director Cast Resource (DCR) files, which are compressed versions of the native Director (DIR) project files designed specifically for efficient web deployment and playback. These DCR files encapsulate multimedia content created in Adobe Director, allowing for optimized distribution across browsers without the need for the full authoring environment. The format supports a modular structure where assets like images, audio, and video are stored in "cast" libraries, enabling reusable components in interactive applications.[8] Adobe Director, the proprietary authoring tool for Shockwave content, supports import of diverse media formats to build rich multimedia projects. For images, it accommodates formats such as PICT and JPEG, facilitating bitmap integration into scenes. Audio imports include WAV files natively, with MP3 support added starting from version 6 (released in 1997) for compressed soundtracks.[20][21] Video integration occurs via QuickTime movies and SWF files from Flash, while 3D models can be incorporated using the Havok physics engine introduced in version 8.5, enabling physics-based simulations and interactions.[20][22][23][24] Developed across versions 4 through 12, Adobe Director provides a timeline-based editing interface where users arrange media as sprites on a stage, manage assets in a score sheet, and implement interactivity through Lingo scripting. This workflow allows creators to sequence events, animate elements, and handle user inputs in a frame-by-frame manner, similar to traditional animation tools but extended for multimedia. Lingo, Director's object-oriented scripting language, enables custom behaviors and logic directly tied to the timeline for dynamic content.[25] The publishing process in Director converts editable DIR projects into runtime DCR files, stripping out authoring-specific elements like editable scores while preserving all media and scripts for playback. This export ensures cross-platform compatibility on Windows and Macintosh systems via the Shockwave Player, requiring no installation of Director itself for end-users to experience the content.[8]Compatibility and Deployment
Supported Platforms
Adobe Shockwave Player provided native support for 32-bit versions of Microsoft Windows operating systems, spanning from Windows 95 through Windows 10.[26][27] On 64-bit Windows systems, installation required the use of a 32-bit web browser, as the player lacked native 64-bit compatibility.[26] Similarly, the player was natively supported on macOS, covering classic Mac OS 7 up to macOS Sierra (10.12), with the final version for macOS being 12.2.5r195 released in September 2016; Adobe discontinued support and updates for the macOS version in March 2017.[28][29][30][31] The player did not offer native support for 64-bit architectures beyond the 32-bit emulation on Windows, nor for operating systems such as Linux or Solaris.[32] Unofficial workarounds, such as running the Windows version through compatibility layers like Wine or CrossOver, have been reported for Linux users, though these are not endorsed or supported by Adobe.[32] Hardware requirements for later versions of Shockwave Player included a minimum CPU speed of 233 MHz and 64 MB of RAM, reflecting the era's standards for multimedia playback.[33] The final build for Windows was version 12.3.5.205, released in April 2019 as part of a security update before full discontinuation.[34] These platform limitations contributed to the player's eventual obsolescence as modern systems shifted toward 64-bit architectures and broader cross-platform standards.Browser Integration and Versions
Adobe Shockwave Player was developed as a Netscape Plugin Application Programming Interface (NPAPI)-based plugin, enabling compatibility with browsers that supported the Netscape architecture, including Netscape Navigator, Microsoft Internet Explorer, Mozilla Firefox prior to 2017, Apple Safari, and Google Chrome in its early years.[35][36] The initial release of Shockwave Player in 1995 targeted Netscape Navigator version 2.0 and later, allowing users to view interactive multimedia content directly within the browser without standalone applications.[37] Subsequent versions expanded support to Microsoft Internet Explorer 4.0 and higher starting around 1997, aligning with IE's adoption of NPAPI compatibility to broaden web deployment.[38] Mozilla Firefox supported Shockwave from version 1.0 (released in 2004) through version 52 (March 2017), after which NPAPI plugins were disabled except for Adobe Flash.[36] Apple Safari integrated Shockwave from version 1.0 (2003) up to version 11 (2017), with version 12 (September 2018) fully removing NPAPI support.[39] Google Chrome provided compatibility from its launch in 2008 until version 44 (2015), as version 45 permanently eliminated NPAPI plugins in September 2015 to prioritize modern web standards.[35] Installation of Shockwave Player was primarily achieved through direct downloads from the Macromedia (later Adobe) website or via automatic prompts triggered by browsers when users accessed unsupported Shockwave content (.dcr files).[40] The plugin included an automatic update mechanism that checked for and installed newer versions silently or via notifications, helping maintain compatibility until Adobe ceased active development around 2013.[41] The plugin's viability declined with the web industry's transition to HTML5 for multimedia delivery, which rendered NPAPI-based technologies obsolete and prompted browsers to phase out support for security reasons.[35] By 2017, major browsers like Firefox 52 and later had blocked NPAPI plugins by default, effectively ending widespread Shockwave integration and confining its use to legacy or specialized environments.[36]Security and Risks
Identified Vulnerabilities
Adobe Shockwave Player suffered from numerous security vulnerabilities throughout its lifecycle, with the majority involving memory corruption and buffer overflows that enabled arbitrary code execution upon exploitation by maliciously crafted files or web content. These flaws were particularly prevalent in versions prior to widespread adoption of modern operating system protections, making the player a frequent target for attackers seeking to compromise systems via browser-based delivery. Security researchers and advisories documented dozens of such issues between 2000 and 2019, predominantly affecting Windows and Macintosh platforms.[42] Buffer overflow vulnerabilities were among the most critical, often allowing remote code execution without user interaction beyond visiting a compromised site. For instance, in 2007, multiple stack-based buffer overflows in SwDir.dll version 10.1.4.20 of Macromedia Shockwave (predecessor to Adobe's version 10) enabled attackers to cause denial of service or execute arbitrary code by processing malformed Director files. Similarly, a stack-based buffer overflow in the SWCtl.SWCtl ActiveX control (CVE-2007-5941) permitted remote exploitation leading to crashes or code execution via long arguments passed to the control. Another notable example occurred in 2010 with a heap-based buffer overflow (CVE-2010-0987) triggered by crafted embedded fonts in Director content, affecting versions before 11.5.7.609 and rated with a CVSS score of 9.3 for its high impact. In 2012, a buffer overflow (CVE-2012-4173) in versions before 11.6.8.638 allowed arbitrary code execution through unspecified vectors, while 2013 saw a memory corruption vulnerability (CVE-2013-0635) in the player that could be exploited via tricked users into opening malicious files. These buffer issues stemmed from inadequate bounds checking in file parsing routines for formats like .dir and .dcr.[43][44] Zero-day exploits targeting Shockwave Player emerged repeatedly between 2007 and 2014, often facilitating drive-by downloads where users were infected simply by browsing malicious websites hosting rigged content. A prominent case in 2011 involved attacks using malicious .dcr files (compressed Director movies) to trigger memory corruption vulnerabilities, such as CVE-2011-2423, which affected msvcr90.dll in versions before 11.6.1.629 and led to code execution or denial of service. Adobe's security bulletins from this period, including APSB11-18, addressed multiple zero-days exploited in the wild, with attackers leveraging the player's parsing of tainted media for silent payload delivery. By 2013 and 2014, additional zero-days like CVE-2013-5333 and CVE-2014-0500 (memory corruption flaws) were actively exploited in targeted campaigns, as confirmed by Adobe's emergency patches. Security firm Krebs on Security highlighted Shockwave's high-risk profile in a 2014 advisory, noting its frequent role in drive-by attacks due to unpatched flaws and poor update adoption.[45][46] Early versions of Shockwave Player notably lacked built-in support for protections like Address Space Layout Randomization (ASLR) and Data Execution Prevention (DEP), exacerbating the exploitability of memory-based flaws until later updates partially aligned with OS-level mitigations around 2010. Overall, these vulnerabilities were overwhelmingly memory corruption-related, with Adobe issuing over 20 security bulletins from 2007 to 2014 alone to patch critical issues, many rated CVSS 10.0 for remote code execution potential. The bundled Flash runtime in Shockwave further amplified risks through inherited flaws, though primarily addressed separately.| Year | CVE ID | Type | Impact | Affected Versions | Exploitation Notes |
|---|---|---|---|---|---|
| 2007 | CVE-2007-1403 | Stack-based buffer overflow | Arbitrary code execution, DoS | 10.1.4.20 and earlier | Malformed Director files; no zero-day confirmation |
| 2007 | CVE-2007-5941 | Stack-based buffer overflow | Arbitrary code execution, DoS | All prior to patch | ActiveX control exploitation via web |
| 2010 | CVE-2010-0987 | Heap-based buffer overflow | Arbitrary code execution | Before 11.5.7.609 | Embedded fonts in media; high CVSS 9.3 |
| 2011 | CVE-2011-2423 | Memory corruption | Arbitrary code execution, DoS | Before 11.6.1.629 | Zero-day in drive-by via .dcr files |
| 2012 | CVE-2012-4173 | Buffer overflow | Arbitrary code execution | Before 11.6.8.638 | Unspecified vectors; patched in APSB12-24 |
| 2013 | CVE-2013-0635 | Memory corruption | Arbitrary code execution, DoS | Before 12.0.0.112 | Unspecified vectors |
| 2014 | CVE-2014-0500 | Memory corruption | Arbitrary code execution, DoS | Before 12.0.9.149 | Zero-day targeted attacks |

