CVE-2015-5120

Adobe Shockwave Player before 12.1.9.159 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a…

published July 14, 2015

CVSS
—
EPSS
4%
Percentile
90.0
In the wild
Unconfirmed
What it is

⚠️ A memory corruption flaw in Adobe Shockwave Player means attackers could take control of your system with a simple exploit! This is no time to ignore it! 🔥 Think of this vulnerability like an unmonitored power outlet in a busy café. If someone plugs in a faulty device, it could not only fry their gadget but also cause a blackout for everyone else! If exploited, this vulnerability could allow attackers to execute arbitrary code, leading to unauthorized access or a complete shutdown of your system. Imagine losing your work or private information because someone plugged in the wrong device!

Put simply

Think of this vulnerability like an unmonitored power outlet in a busy café. If someone plugs in a faulty device, it could not only fry their gadget but also cause a blackout for everyone else! This vulnerability allows attackers to exploit memory corruption in Adobe Shockwave Player prior to version 12.1.9.159 through unspecified methods, which can lead to arbitrary code execution or denial of service.

What to do

If exploited, this vulnerability could allow attackers to execute arbitrary code, leading to unauthorized access or a complete shutdown of your system. Imagine losing your work or private information because someone plugged in the wrong device! To protect yourself, upgrade to Adobe Shockwave Player version 12.1.9.159 or later immediately. Regularly check for updates and consider disabling Shockwave Player if it’s not essential for your needs. You've got this! With these steps, you'll keep your system safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03798 · 90.0th percentile
Published
2015-07-14T23:00Z
EPSS history
Timeline
  • 14 JUL 23:00Z
    Adobe Shockwave Player before 12.1.9.159 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a…
    cvelistv5