CVE-2013-3360

Adobe Shockwave Player before 12.0.4.144 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a…

published September 11, 2013

CVSS
—
EPSS
5%
Percentile
91.6
In the wild
Unconfirmed
What it is

⚠️ A vexing memory flaw in Adobe Shockwave Player could let attackers run arbitrary code like it’s their own video game! 🎮 Think of it like a movie theater with a projector that can be hijacked to show any film, including those not meant for the audience. If an attacker finds a way to exploit this, they can disrupt the show or play something far worse than expected! If exploited, this vulnerability could allow an attacker to take control of the affected system or cause it to crash, leading to potential data loss or disruption of services. While it’s not actively exploited yet, the risks of arbitrary code execution are always looming!

Put simply

Think of it like a movie theater with a projector that can be hijacked to show any film, including those not meant for the audience. If an attacker finds a way to exploit this, they can disrupt the show or play something far worse than expected! This vulnerability in Adobe Shockwave Player allows for memory corruption through unspecified vectors, granting attackers the ability to execute arbitrary code or create a denial of service condition.

What to do

If exploited, this vulnerability could allow an attacker to take control of the affected system or cause it to crash, leading to potential data loss or disruption of services. While it’s not actively exploited yet, the risks of arbitrary code execution are always looming! To protect yourself, update Adobe Shockwave Player to the latest version (12.0.4.144 or higher) immediately. Regularly check for updates and consider disabling the plugin if you don’t use it actively. Your vigilance can make a huge difference! You've got this! Stay sharp and keep your software updated to maintain your security hero status! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04602 · 91.6th percentile
Published
2013-09-11T23:00Z
EPSS history
Timeline
  • 11 SEP 23:00Z
    Adobe Shockwave Player before 12.0.4.144 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a…
    cvelistv5