CVE-2012-2047

Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a…

published August 15, 2012

CVSS
—
EPSS
4%
Percentile
90.3
In the wild
Unconfirmed
What it is

⚠️ A sneaky memory corruption bug in Adobe Shockwave Player could leave your system vulnerable, with attackers able to execute arbitrary code! Think of this vulnerability like a faulty road in a busy city, where a poorly placed pothole can throw off deliveries or even cause a serious accident. Attackers could exploit this gap in security to reroute your system without you knowing! If exploited, an attacker could gain control over your system, potentially leading to data theft, system crashes, or unauthorized access to sensitive information. This could be particularly disastrous if you're running critical applications that rely on Shockwave Player.

Put simply

Think of this vulnerability like a faulty road in a busy city, where a poorly placed pothole can throw off deliveries or even cause a serious accident. Attackers could exploit this gap in security to reroute your system without you knowing! This vulnerability allows for arbitrary code execution or denial of service through unspecified vectors, meaning the exact method of exploitation isn't clear, but it still poses a risk for users running affected versions of Shockwave Player (prior to 11.6.6.636).

What to do

If exploited, an attacker could gain control over your system, potentially leading to data theft, system crashes, or unauthorized access to sensitive information. This could be particularly disastrous if you're running critical applications that rely on Shockwave Player. To protect your system, upgrade Adobe Shockwave Player to version 11.6.6.636 or later immediately. It's essential to stay updated and regularly check for any security patches from Adobe in the future. You've got this! With these steps, you'll keep your system safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03942 · 90.3th percentile
Published
2012-08-15T10:00Z
EPSS history
Timeline
  • 15 AUG 10:00Z
    Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a…
    cvelistv5