Adobe Shockwave Player vulnerabilities
173 known vulnerabilities affecting adobe/shockwave_player.
Total CVEs
173
CISA KEV
0
Public exploits
4
Exploited in wild
1
Severity breakdown
CRITICAL160HIGH10MEDIUM3
Vulnerabilities
Page 2 of 9
CVE-2014-0501P3CRITICALCVSS 10.0≤ 12.0.7.148v11.0.0.456+24 more2014-02-12
CVE-2014-0501 [CRITICAL] CVE-2014-0501: Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause
Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0500.
nvd
CVE-2013-1383P3CRITICALCVSS 10.0≤ 12.0.0.112v1.0+51 more2013-04-10
CVE-2013-1383 [CRITICAL] CWE-119 CVE-2013-1383: Buffer overflow in Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary co
Buffer overflow in Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2014-0500P3CRITICALCVSS 10.0≤ 12.0.7.148v11.0.0.456+24 more2014-02-12
CVE-2014-0500 [CRITICAL] CWE-119 CVE-2014-0500: Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause
Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0501.
nvd
CVE-2011-2125P3CRITICALCVSS 9.3≤ 11.5.9.620v1.0+41 more2011-06-16
CVE-2011-2125 [CRITICAL] CWE-119 CVE-2011-2125: Buffer overflow in Dirapix.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execu
Buffer overflow in Dirapix.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2011-2126P3CRITICALCVSS 9.3≤ 11.5.9.620v1.0+41 more2011-06-16
CVE-2011-2126 [CRITICAL] CWE-119 CVE-2011-2126: Buffer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary co
Buffer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2014-0505P3CRITICALCVSS 10.0≤ 12.0.9.149v12.0.0.112+5 more2014-03-14
CVE-2014-0505 [CRITICAL] CWE-119 CVE-2014-0505: Adobe Shockwave Player before 12.1.0.150 allows remote attackers to execute arbitrary code or cause
Adobe Shockwave Player before 12.1.0.150 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
nvd
CVE-2009-1860P3CRITICALCVSS 9.3≤ 11.5.0.596v1.0+10 more2009-06-25
CVE-2009-1860 [CRITICAL] CVE-2009-1860: Unspecified vulnerability in Adobe Shockwave Player before 11.5.0.600 allows remote attackers to exe
Unspecified vulnerability in Adobe Shockwave Player before 11.5.0.600 allows remote attackers to execute arbitrary code via crafted Shockwave Player 10 content.
nvd
CVE-2010-4193P3CRITICALCVSS 9.3≤ 11.5.9.615v1.0+40 more2011-02-10
CVE-2010-4193 [CRITICAL] CWE-20 CVE-2010-4193: Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which al
Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.
nvd
CVE-2010-2582P3CRITICALCVSS 9.3≤ 11.5.8.612v1.0+39 more2010-10-29
CVE-2010-2582 [CRITICAL] CWE-119 CVE-2010-2582: An unspecified function in TextXtra.x32 in Adobe Shockwave Player before 11.5.9.615 does not properl
An unspecified function in TextXtra.x32 in Adobe Shockwave Player before 11.5.9.615 does not properly reallocate a buffer when processing a DEMX chunk in a Director file, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code.
nvd
CVE-2012-0758P3CRITICALCVSS 10.0≤ 11.6.3.633v1.0+44 more2012-02-15
CVE-2012-0758 [CRITICAL] CWE-119 CVE-2012-0758: Heap-based buffer overflow in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute a
Heap-based buffer overflow in Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2019-7100P3CRITICALCVSS 9.8≤ 12.3.4.2042019-05-23
CVE-2019-7100 [CRITICAL] CWE-787 CVE-2019-7100: Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Succe
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2019-7098P3CRITICALCVSS 9.8≤ 12.3.4.2042019-05-23
CVE-2019-7098 [CRITICAL] CWE-787 CVE-2019-7098: Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Succe
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2019-7103P3CRITICALCVSS 9.8≤ 12.3.4.2042019-05-23
CVE-2019-7103 [CRITICAL] CWE-787 CVE-2019-7103: Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Succe
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2019-7099P3CRITICALCVSS 9.8≤ 12.3.4.2042019-05-23
CVE-2019-7099 [CRITICAL] CWE-787 CVE-2019-7099: Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Succe
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2010-4307P3CRITICALCVSS 9.3≤ 11.5.9.615v1.0+40 more2011-02-10
CVE-2010-4307 [CRITICAL] CWE-119 CVE-2010-4307: Buffer overflow in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary co
Buffer overflow in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2010-0130P3HIGHCVSS 8.8fixed in 11.5.7.6092010-05-13
CVE-2010-0130 [HIGH] CWE-190 CVE-2010-0130: Integer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute
Integer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via a crafted .dir (aka Director) file.
nvd
CVE-2010-2876P3CRITICALCVSS 9.3≤ 11.5.7.609v1.0+38 more2010-08-26
CVE-2010-2876 [CRITICAL] CWE-20 CVE-2010-2876: Adobe Shockwave Player before 11.5.8.612 does not properly validate values associated with buffer-si
Adobe Shockwave Player before 11.5.8.612 does not properly validate values associated with buffer-size calculation for a 0xFFFFFFF8 record in a (1) .dir or (2) .dcr Director movie, which allows remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted movie.
nvd
CVE-2011-2108P3CRITICALCVSS 9.3≤ 11.5.9.620v1.0+41 more2011-06-16
CVE-2011-2108 [CRITICAL] CVE-2011-2108: Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified
Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to a "design flaw."
nvd
CVE-2010-4195P3CRITICALCVSS 9.3≤ 11.5.9.615v1.0+40 more2011-02-10
CVE-2010-4195 [CRITICAL] CWE-20 CVE-2010-4195: The TextXtra module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecifi
The TextXtra module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.
nvd
CVE-2010-4196P3CRITICALCVSS 9.3≤ 11.5.9.615v1.0+40 more2011-02-10
CVE-2010-4196 [CRITICAL] CWE-20 CVE-2010-4196: The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate
The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.
nvd