CVE-2010-4309

Adobe Shockwave Player < 11.6.1.629 - Remote Code Execution via Memory Corruption

Title source: llm
STIX 2.1

Description

Adobe Shockwave Player before 11.6.1.629 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-4308.

References (2)

Core 2
Core References
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA11-222A.html
Patch, Vendor Advisory x_refsource_confirm
http://www.adobe.com/support/security/bulletins/apsb11-19.html

Scores

EPSS 0.0421
EPSS Percentile 89.8%

Details

CWE
CWE-119
Status published
Products (44)
adobe/shockwave_player 1.0
adobe/shockwave_player 2.0
adobe/shockwave_player 3.0
adobe/shockwave_player 4.0
adobe/shockwave_player 5.0
adobe/shockwave_player 6.0
adobe/shockwave_player 8.0
adobe/shockwave_player 8.0.196
adobe/shockwave_player 8.0.196a
adobe/shockwave_player 8.0.204
... and 34 more
Published Aug 11, 2011
Tracked Since Feb 18, 2026