CVE-2009-3466
04.11.2009, 15:30
Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an "invalid string length vulnerability." NOTE: some of these details are obtained from third party information.Enginsight
| Vendor | Product | Version |
|---|---|---|
| adobe | shockwave_player | 𝑥 ≤ 11.5.1.601 |
| adobe | shockwave_player | 1.0 |
| adobe | shockwave_player | 2.0 |
| adobe | shockwave_player | 3.0 |
| adobe | shockwave_player | 4.0 |
| adobe | shockwave_player | 5.0 |
| adobe | shockwave_player | 6.0 |
| adobe | shockwave_player | 8.0 |
| adobe | shockwave_player | 8.5.1 |
| adobe | shockwave_player | 10.1.0.11 |
| adobe | shockwave_player | 11.0.0.456 |
| adobe | shockwave_player | 11.5.0.595 |
| adobe | shockwave_player | 11.5.0.596 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References