Lucene search

K
nvd[email protected]NVD:CVE-2009-3464
HistoryNov 04, 2009 - 3:30 p.m.

CVE-2009-3464

2009-11-0415:30:00
CWE-94
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.073 Low

EPSS

Percentile

94.1%

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an “invalid pointer vulnerability,” a different issue than CVE-2009-3465. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
adobeshockwave_playerRange11.5.1.601
OR
adobeshockwave_playerMatch1.0
OR
adobeshockwave_playerMatch2.0
OR
adobeshockwave_playerMatch3.0
OR
adobeshockwave_playerMatch4.0
OR
adobeshockwave_playerMatch5.0
OR
adobeshockwave_playerMatch6.0
OR
adobeshockwave_playerMatch8.0
OR
adobeshockwave_playerMatch8.5.1
OR
adobeshockwave_playerMatch9
OR
adobeshockwave_playerMatch10.1.0.11
OR
adobeshockwave_playerMatch11.0.0.456
OR
adobeshockwave_playerMatch11.5.0.595
OR
adobeshockwave_playerMatch11.5.0.596

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.073 Low

EPSS

Percentile

94.1%