NetSight
IP …
critical9.3

CVE-2011-2123

Integer overflow in the Shockwave 3D Asset x32 component in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code via a cr…

Impact

Integer overflow in the Shockwave 3D Asset x32 component in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code via a crafted subrecord in a DEMX chunk, which triggers a heap-based buffer overflow.

Affected products

VendorProductAffected versions
AdobeShockwave Player
through 11.5.9.620
Versions 1.0, 2.0, 3.0, 4.0, 5.0

Weakness classification

CWE-189

References