VendorsAdobeshockwave_player11.6.7.637
Vulnerabilities

Adobe Shockwave Player 11.6.7.637

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

13CVEs
CVE-2013-0636
Stack-based buffer overflow in Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code via unspecified vectors.
Published 2013-02-13 · Modified
10.0EPSS 0.093
CVE-2014-0501
Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0500.
Published 2014-02-12 · Modified
10.0EPSS 0.060
CVE-2013-1383
Buffer overflow in Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code via unspecified vectors.
Published 2013-04-10 · Modified
10.0EPSS 0.060
CVE-2014-0500
Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0501.
Published 2014-02-12 · Modified
10.0EPSS 0.059
CVE-2013-0635
Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Published 2013-02-13 · Modified
10.0EPSS 0.053
CVE-2013-3360
Adobe Shockwave Player before 12.0.4.144 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3359.
Published 2013-09-11 · Modified
10.0EPSS 0.046
CVE-2013-1385
Adobe Shockwave Player before 12.0.2.122 does not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors.
Published 2013-04-10 · Modified
10.0EPSS 0.043
CVE-2013-1384
Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-1386.
Published 2013-04-10 · Modified
10.0EPSS 0.039
CVE-2013-1386
Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-1384.
Published 2013-04-10 · Modified
10.0EPSS 0.039
CVE-2013-3359
Adobe Shockwave Player before 12.0.4.144 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3360.
Published 2013-09-11 · Modified
10.0EPSS 0.038
CVE-2013-3348
Adobe Shockwave Player before 12.0.3.133 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Published 2013-07-10 · Modified
10.0EPSS 0.038
CVE-2012-6271
Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie that contains an Xtra URL, as demonstrated by a URL for an outdated Xtra.
Published 2012-12-20 · Modified
9.3EPSS 0.027
CVE-2012-6270
Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of a Shockwave Player 10.4.0.025 compatibility feature via a crafted HTML document that references Shockwave content with a certain compatibility parameter, related to a "downgrading" attack.
Published 2012-12-20 · Modified
9.3EPSS 0.025