Описание
Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file, related to (1) an erroneous dereference and (2) a certain Shock.dir file.
Ссылки
- Broken Link
- Broken LinkVendor Advisory
- PatchVendor Advisory
- Broken LinkVDB Entry
- Broken LinkVendor Advisory
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- Tool Signature
- Broken Link
- Broken LinkVendor Advisory
- PatchVendor Advisory
- Broken LinkVDB Entry
- Broken LinkVendor Advisory
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- Tool Signature
Уязвимые конфигурации
Конфигурация 1Версия до 11.5.7.609 (исключая)
Одновременно
cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*
Одно из
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
EPSS
Процентиль: 96%
0.29657
Средний
8.8 High
CVSS3
9.3 Critical
CVSS2
Дефекты
CWE-787
Связанные уязвимости
CVSS3: 8.8
github
почти 4 года назад
Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file, related to (1) an erroneous dereference and (2) a certain Shock.dir file.
EPSS
Процентиль: 96%
0.29657
Средний
8.8 High
CVSS3
9.3 Critical
CVSS2
Дефекты
CWE-787