KLA10255 Multiple ACE vulnerabilities in Adobe Shockwave Player

Multiple unspecified vulnerabilities were found in Shockwave player. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. These vulnerabilities can be exploited remotely at unspecified vectors.

Original advisories

Related products

Adobe-Shockwave-Player

CVE list

CVE-2013-3360 critical

CVE-2013-3359 critical

Solution

Update to latest version

Shockwave Player

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Shockwave Player versions 12.0.3.133 and earlier