CVE-2011-2115
published 2011-06-16CVE-2011-2115: IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
PriorityP349critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
7.88%
94.0th percentile
IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted tSAC chunk, which triggers a heap-based buffer overflow, a different vulnerability than CVE-2011-2111 and CVE-2011-2116.
Affected
43 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | shockwave_player | <= 11.5.9.620 | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-vf8q-5pmf-2rv3: IML32
ghsa_unreviewed·2022-05-17·CVSS 9.3
CVE-2011-2111 [CRITICAL] CWE-119 GHSA-vf8q-5pmf-2rv3: IML32
IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2115 and CVE-2011-2116.
GHSA
GHSA-4j6w-68g9-8x9h: IML32
ghsa_unreviewed·2022-05-17·CVSS 9.3
CVE-2011-2115 [CRITICAL] CWE-119 GHSA-4j6w-68g9-8x9h: IML32
IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted tSAC chunk, which triggers a heap-based buffer overflow, a different vulnerability than CVE-2011-2111 and CVE-2011-2116.
GHSA
GHSA-xx5x-v9g7-78fj: IML32
ghsa_unreviewed·2022-05-17·CVSS 9.3
CVE-2011-2116 [CRITICAL] CWE-119 GHSA-xx5x-v9g7-78fj: IML32
IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2111 and CVE-2011-2115.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=919http://www.adobe.com/support/security/bulletins/apsb11-17.htmlhttp://www.us-cert.gov/cas/techalerts/TA11-166A.htmlhttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=919http://www.adobe.com/support/security/bulletins/apsb11-17.htmlhttp://www.us-cert.gov/cas/techalerts/TA11-166A.html
2011-06-16
Published