CVE-2009-3466: Critical severity adobe shockwave player vulnerability
Published Nov 4, 2009
·Updated
Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an "invalid string length vulnerability." NOTE: some of these details are obtained from third party information.
Affected Software
14 affected components
Adobe Shockwave Player=5.0
Adobe Shockwave Player=4.0
Adobe Shockwave Player=8.5.1
Adobe Shockwave Player=11.0.0.456
Adobe Shockwave Player=6.0
Adobe Shockwave Player=10.1.0.11
Adobe Shockwave Player=11.5.0.596
Adobe Shockwave Player=1.0
Adobe Shockwave Player<=11.5.1.601
Adobe Shockwave Player=2.0
Adobe Shockwave Player=8.0
Adobe Shockwave Player=3.0
Adobe Shockwave Player=11.5.0.595
Adobe Shockwave Player=9
Remediation
Event History
Nov 4, 2009
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-3466?
CVE-2009-3466 is classified as a critical vulnerability that allows remote code execution.
2
How do I fix CVE-2009-3466?
To fix CVE-2009-3466, update Adobe Shockwave Player to version 11.5.2.602 or later.
3
What impact does CVE-2009-3466 have on my system?
CVE-2009-3466 can lead to unauthorized remote code execution, potentially compromising the system.
4
Which versions of Adobe Shockwave Player are affected by CVE-2009-3466?
CVE-2009-3466 affects Adobe Shockwave Player versions prior to 11.5.2.602.
5
How can attackers exploit CVE-2009-3466?
Attackers can exploit CVE-2009-3466 through a crafted web page that triggers memory corruption.