CVE-2009-4003
21.01.2010, 19:30
Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via (1) an unspecified block type in a Shockwave file, leading to a heap-based buffer overflow; and might allow remote attackers to execute arbitrary code via (2) an unspecified 3D block in a Shockwave file, leading to memory corruption; or (3) a crafted 3D model in a Shockwave file, leading to heap memory corruption.Enginsight
| Vendor | Product | Version |
|---|---|---|
| adobe | shockwave_player | 𝑥 ≤ 11.5.2.602 |
| adobe | shockwave_player | 1.0 |
| adobe | shockwave_player | 2.0 |
| adobe | shockwave_player | 3.0 |
| adobe | shockwave_player | 4.0 |
| adobe | shockwave_player | 5.0 |
| adobe | shockwave_player | 6.0 |
| adobe | shockwave_player | 8.0 |
| adobe | shockwave_player | 8.5.1 |
| adobe | shockwave_player | 10.1.0.11 |
| adobe | shockwave_player | 11.0.0.456 |
| adobe | shockwave_player | 11.5.0.595 |
| adobe | shockwave_player | 11.5.0.596 |
| adobe | shockwave_player | 11.5.1.601 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References