CVEvulnerability

CVE-2009-3465

9.3 HIGH Published 2009-11-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-11-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94

Description

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3464. NOTE: some of these details are obtained from third party information.

Affected configurations

• adobe shockwave player (<= 11.5.1.601) • adobe shockwave player 1.0 • adobe shockwave player 2.0 • adobe shockwave player 3.0 • adobe shockwave player 4.0 • adobe shockwave player 5.0 • adobe shockwave player 6.0 • adobe shockwave player 8.0 • adobe shockwave player 8.5.1 • adobe shockwave player 9 • adobe shockwave player 10.1.0.11 • adobe shockwave player 11.0.0.456 • adobe shockwave player 11.5.0.595 • adobe shockwave player 11.5.0.596

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References