Lucene search

PRIOn knowledge basePRION:CVE-2009-4002

HistoryJan 21, 2010 - 7:30 p.m.

Heap overflow

2010-01-2119:30:00

PRIOn knowledge base

www.prio-n.com

8.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.39 Low

EPSS

Percentile

97.1%

JSON

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file.

CPENameOperatorVersion
shockwave_playereq5.0
shockwave_playereq4.0
shockwave_playereq8.5.1
shockwave_playereq11.5.1.601
shockwave_playereq11.0.0.456
shockwave_playereq6.0
shockwave_playereq10.1.0.11
shockwave_playereq11.5.0.596
shockwave_playereq1.0
shockwave_playereq2.0

Name	Operator	Version
shockwave_player	eq	5.0
shockwave_player	eq	4.0
shockwave_player	eq	8.5.1
shockwave_player	eq	11.5.1.601
shockwave_player	eq	11.0.0.456
shockwave_player	eq	6.0
shockwave_player	eq	10.1.0.11
shockwave_player	eq	11.5.0.596
shockwave_player	eq	1.0
shockwave_player	eq	2.0

Rows per page:

1-10 of 151

References

secunia.com/advisories/37888

secunia.com/secunia_research/2009-61/

securitytracker.com/id?1023481

www.adobe.com/support/security/bulletins/apsb10-03.html

www.securityfocus.com/archive/1/509062/100/0/threaded

www.securityfocus.com/bid/37870

www.vupen.com/english/advisories/2010/0171

exchange.xforce.ibmcloud.com/vulnerabilities/55758

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8311

8.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.39 Low

EPSS

Percentile

97.1%

JSON

Related for PRION:CVE-2009-4002