CVE-2011-2421

Adobe Shockwave Player < 11.6.1.629 - Remote Code Execution via Crafted .dir Media File

Title source: llm
STIX 2.1

Description

Dirapi.dll in Adobe Shockwave Player before 11.6.1.629 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir media file.

References (2)

Core 2
Core References
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA11-222A.html
Patch, Vendor Advisory x_refsource_confirm
http://www.adobe.com/support/security/bulletins/apsb11-19.html

Scores

EPSS 0.0430
EPSS Percentile 90.0%

Details

CWE
CWE-119
Status published
Products (44)
adobe/shockwave_player 1.0
adobe/shockwave_player 2.0
adobe/shockwave_player 3.0
adobe/shockwave_player 4.0
adobe/shockwave_player 5.0
adobe/shockwave_player 6.0
adobe/shockwave_player 8.0
adobe/shockwave_player 8.0.196
adobe/shockwave_player 8.0.196a
adobe/shockwave_player 8.0.204
... and 34 more
Published Aug 11, 2011
Tracked Since Feb 18, 2026