CVE-2015-7649 Adobe Shockwave Player before 12.2.1.171 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

HighCVSS 10.0 EPSS 3.8%

Published: 2015-10-28 20:00
Updated: 2026-06-17 03:32
Exploit status: No public exploit known

Description

Adobe Shockwave Player before 12.2.1.171 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Affected products

Product	Affected versions	Fixed in
Adobe shockwave player	<= 12.2.0.162	No fix listed

References

1033990 vdb-entry
helpx.adobe.com patch vendor-advisory

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 3.75% (percentile 90.1)
CWE: CWE-119

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.