CVE-2011-2123

No fix known EPSS 7%

Integer overflow in the Shockwave 3D Asset x32 component in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code via a crafted subrecord in a DEMX chunk, which triggers a heap-based buffer overflow.

Published 2011-06-16 · CVE record · OSV

Products: adobe shockwave_player