CVE-2015-6680

Adobe Shockwave Player before 12.2.0.162 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a…

published September 9, 2015

CVSS
—
EPSS
5%
Percentile
92.3
In the wild
Unconfirmed
What it is

⚠️ Watch out for a sneaky memory corruption flaw! Adobe Shockwave Player before version 12.2.0.162 allows attackers to execute arbitrary code like a magician pulling rabbits from an empty hat. 🎩 Think of it as a restaurant where the chef starts mixing up orders without checking the tickets — anyone might end up with a dish that's not just wrong but potentially harmful! This vulnerability could allow attackers to not only run their own code but also crash the application entirely, leaving users in a frustrating limbo. Imagine trying to enjoy a meal and suddenly the kitchen goes up in flames — that's what this could feel like!

Put simply

Think of it as a restaurant where the chef starts mixing up orders without checking the tickets — anyone might end up with a dish that's not just wrong but potentially harmful! Adobe Shockwave Player has a memory corruption vulnerability that could be exploited through various unspecified vectors, leading to arbitrary code execution or denial of service.

What to do

This vulnerability could allow attackers to not only run their own code but also crash the application entirely, leaving users in a frustrating limbo. Imagine trying to enjoy a meal and suddenly the kitchen goes up in flames — that's what this could feel like! Update Adobe Shockwave Player to version 12.2.0.162 or later immediately to patch this vulnerability. Regularly check for updates and consider disabling or removing Shockwave Player if it's not in use anymore. Stay on top of security practices! You've got this! Follow these steps and you'll keep things running smooth and safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05095 · 92.3th percentile
Published
2015-09-09T00:00Z
EPSS history
Timeline
  • 09 SEP 00:00Z
    Adobe Shockwave Player before 12.2.0.162 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a…
    cvelistv5