CVE-2011-2118 The FLV ASSET Xtra component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to an "input validation vulnerability."
HighCVSS 9.3
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The FLV ASSET Xtra component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to an "input validation vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe shockwave player | <= 11.5.9.620 | No fix listed |
| Adobe shockwave player | = 1.0 | No fix listed |
| Adobe shockwave player | = 2.0 | No fix listed |
| Adobe shockwave player | = 3.0 | No fix listed |
| Adobe shockwave player | = 4.0 | No fix listed |
| Adobe shockwave player | = 5.0 | No fix listed |
| Adobe shockwave player | = 6.0 | No fix listed |
| Adobe shockwave player | = 8.0 | No fix listed |
| Adobe shockwave player | = 8.0.196 | No fix listed |
| Adobe shockwave player | = 8.0.196a | No fix listed |
| Adobe shockwave player | = 8.0.204 | No fix listed |
| Adobe shockwave player | = 8.0.205 | No fix listed |
| Adobe shockwave player | = 8.5.1 | No fix listed |
| Adobe shockwave player | = 8.5.1.100 | No fix listed |
| Adobe shockwave player | = 8.5.1.103 | No fix listed |
| Adobe shockwave player | = 8.5.1.105 | No fix listed |
| Adobe shockwave player | = 8.5.1.106 | No fix listed |
| Adobe shockwave player | = 8.5.321 | No fix listed |
| Adobe shockwave player | = 8.5.323 | No fix listed |
| Adobe shockwave player | = 8.5.324 | No fix listed |
| Adobe shockwave player | = 8.5.325 | No fix listed |
| Adobe shockwave player | = 9 | No fix listed |
| Adobe shockwave player | = 9.0.383 | No fix listed |
| Adobe shockwave player | = 9.0.432 | No fix listed |
| Adobe shockwave player | = 10.0.0.210 | No fix listed |
Show 18 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe shockwave player | = 10.0.1.004 | No fix listed |
| Adobe shockwave player | = 10.1.0.11 | No fix listed |
| Adobe shockwave player | = 10.1.0.011 | No fix listed |
| Adobe shockwave player | = 10.1.1.016 | No fix listed |
| Adobe shockwave player | = 10.1.4.020 | No fix listed |
| Adobe shockwave player | = 10.2.0.021 | No fix listed |
| Adobe shockwave player | = 10.2.0.022 | No fix listed |
| Adobe shockwave player | = 10.2.0.023 | No fix listed |
| Adobe shockwave player | = 11.0.0.456 | No fix listed |
| Adobe shockwave player | = 11.0.3.471 | No fix listed |
| Adobe shockwave player | = 11.5.0.595 | No fix listed |
| Adobe shockwave player | = 11.5.0.596 | No fix listed |
| Adobe shockwave player | = 11.5.1.601 | No fix listed |
| Adobe shockwave player | = 11.5.2.602 | No fix listed |
| Adobe shockwave player | = 11.5.6.606 | No fix listed |
| Adobe shockwave player | = 11.5.7.609 | No fix listed |
| Adobe shockwave player | = 11.5.8.612 | No fix listed |
| Adobe shockwave player | = 11.5.9.615 | No fix listed |
References
- www.adobe.com patch vendor-advisory
- TA11-166A third-party-advisory us-government-resource