Lucene search

PRIOn knowledge basePRION:CVE-2011-2123

HistoryJun 16, 2011 - 11:55 p.m.

Integer overflow

2011-06-1623:55:00

PRIOn knowledge base

www.prio-n.com

8.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.035 Low

EPSS

Percentile

91.3%

JSON

Integer overflow in the Shockwave 3D Asset x32 component in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code via a crafted subrecord in a DEMX chunk, which triggers a heap-based buffer overflow.

CPENameOperatorVersion
shockwave_playereq8.5.324
shockwave_playereq5.0
shockwave_playereq4.0
shockwave_playereq8.5.1
shockwave_playereq10.1.4.020
shockwave_playereq11.5.9.615
shockwave_playereq11.5.1.601
shockwave_playereq11.0.0.456
shockwave_playereq6.0
shockwave_playereq8.0.204

Name	Operator	Version
shockwave_player	eq	8.5.324
shockwave_player	eq	5.0
shockwave_player	eq	4.0
shockwave_player	eq	8.5.1
shockwave_player	eq	10.1.4.020
shockwave_player	eq	11.5.9.615
shockwave_player	eq	11.5.1.601
shockwave_player	eq	11.0.0.456
shockwave_player	eq	6.0
shockwave_player	eq	8.0.204

Rows per page:

1-10 of 431

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=922

www.adobe.com/support/security/bulletins/apsb11-17.html

www.us-cert.gov/cas/techalerts/TA11-166A.html

8.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.035 Low

EPSS

Percentile

91.3%

JSON

Related for PRION:CVE-2011-2123