CVE-2017-2983

CWE-4263 documents3 sources
Severity
7.8HIGH
EPSS
2.2%
top 15.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Shockwave Player
Timeline
PublishedMar 14
Latest updateMay 17

Description

Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to escalation of privilege.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5adobe_shockwave_12.2.7.197_and_earlier.Adobe Shockwave 12.2.7.197 and earlier.
▶NVDadobe/shockwave_player12.2.7.197

🔴Vulnerability Details

2
GHSA
GHSA-24fv-mmr6-7gc5: Adobe Shockwave versions 12↗2022-05-17
▶
CVEList
CVE-2017-2983: Adobe Shockwave versions 12↗2017-03-14
▶
CVE-2017-2983 (HIGH CVSS 7.8) | Adobe Shockwave versions 12.2.7.197 | cvebase.io