CVE-2017-3086

Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability

published June 20, 2017

CVSS
โ€”
EPSS
7%
Percentile
94.0
In the wild
Unconfirmed
What it is

โš ๏ธ A memory corruption vulnerability in Adobe Shockwave can allow attackers to run code on your system โ€” think of it as an uninvited guest taking over the party! ๐ŸŽ‰ Imagine a waiter at a restaurant who accidentally spills a drink on your laptop, causing it to crash and run programs you never ordered. This vulnerability lets attackers spill their malicious code into your system, bypassing your defenses. If exploited, this vulnerability could lead to arbitrary code execution, giving attackers full access to your system. They could steal sensitive information, install malware, or use your device as part of a botnet โ€” absolutely devastating!

Put simply

Imagine a waiter at a restaurant who accidentally spills a drink on your laptop, causing it to crash and run programs you never ordered. This vulnerability lets attackers spill their malicious code into your system, bypassing your defenses. The vulnerability arises from improper memory handling in Adobe Shockwave, which can be exploited by an attacker to execute arbitrary code when a user opens a specially crafted file or interacts with malicious content.

What to do

If exploited, this vulnerability could lead to arbitrary code execution, giving attackers full access to your system. They could steal sensitive information, install malware, or use your device as part of a botnet โ€” absolutely devastating! To protect yourself, update Adobe Shockwave to version 12.3.0.204 or later, which addresses this memory corruption issue. Additionally, consider disabling Shockwave if it's not needed for your daily tasks to minimize risk. You've got this! By updating your software, you can keep your system safe and secure. ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06875 ยท 94.0th percentile
Published
2017-06-20T17:00Z
EPSS history
Timeline
  • 20 JUN 17:00Z
    Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability
    cvelistv5