CVE-2019-7104

CWE-787 — Out-of-bounds Write4 documents4 sources
Severity
9.8CRITICAL
EPSS
2.5%
top 14.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Adobe Shockwave PlayerAdobe Adobe Shockwave Player
Timeline
PublishedMay 23
Latest updateMay 24

Description

Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶NVDadobe/shockwave_player12.3.4.204
▶CVEListV5adobe/adobe_shockwave_player12.3.4.204 and earlier versions

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-x6jv-vvrj-p92p: Adobe Shockwave Player versions 12↗2022-05-24
▶
CVEList
CVE-2019-7104: Adobe Shockwave Player versions 12↗2019-05-23
▶
CVE-2019-7104 (CRITICAL CVSS 9.8) | Adobe Shockwave Player versions 12. | cvebase.io