CVE-2011-0569Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe Shockwave Player

Severity
9.3CRITICALNVD
EPSS
4.8%
top 10.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 10
Latest updateMay 14

Description

The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PFR1 chunk containing an invalid size value that leads to an unexpected sign extension and a buffer overflow, a different vulnerability than CVE-2011-0556.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

NVDadobe/shockwave_player11.5.9.615+41

Patches

🔴Vulnerability Details

2
GHSA
GHSA-w9qv-jvmq-xw89: The Font Xtra2022-05-14
CVEList
CVE-2011-0569: The Font Xtra2011-02-10
CVE-2011-0569 — Adobe Shockwave Player vulnerability | cvebase