CVE-2019-7101

CWE-787 — Out-of-bounds Write4 documents4 sources
Severity
9.8CRITICAL
EPSS
7.5%
top 8.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Adobe Shockwave PlayerAdobe Adobe Shockwave Player
Timeline
PublishedMay 23
Latest updateMay 24

Description

Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶NVDadobe/shockwave_player12.3.4.204
▶CVEListV5adobe/adobe_shockwave_player12.3.4.204 and earlier versions

🔴Vulnerability Details

2
GHSA
GHSA-g5p5-g4qw-f9hw: Adobe Shockwave Player versions 12↗2022-05-24
▶
CVEList
CVE-2019-7101: Adobe Shockwave Player versions 12↗2019-05-23
▶
CVE-2019-7101 (CRITICAL CVSS 9.8) | Adobe Shockwave Player versions 12. | cvebase.io