CVE-2009-2186 — Adobe Shockwave Player vulnerability

3 documents3 sources
Severity
9.3CRITICALNVD
EPSS
5.8%
top 9.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Shockwave Player
Timeline
PublishedJun 25
Latest updateMay 2

Description

Unspecified vulnerability in Adobe Shockwave Player before 11.0.0.465 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2009-1860, related to an older issue that "was previously resolved in Shockwave Player 11.0.0.465."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDadobe/shockwave_player11.0.0.456+10

Patches

Patch: www.adobe.com ↗Patch: www.adobe.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-v9mm-j6r3-xv8r: Unspecified vulnerability in Adobe Shockwave Player before 11↗2022-05-02
▶
CVEList
CVE-2009-2186: Unspecified vulnerability in Adobe Shockwave Player before 11↗2009-06-24
▶
CVE-2009-2186 — Adobe Shockwave Player vulnerability | cvebase