CVE-2009-4003
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 7.4%
exploitation probability
7.4%top 6% of all CVEs
observed exploitation
nono source reports it
Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via (1) an unspecified block type in a Shockwave file, leading to a heap-based buffer overflow; and might allow remote attackers to execute arbitrary code via (2) an unspecified 3D block in a Shockwave file, leading to memory corruption; or (3) a crafted 3D model in a Shockwave file, leading to heap memory corruption.
Affected products
n/a · n/aReferences
http://secunia.com/advisories/37888http://secunia.com/secunia_research/2009-62/http://secunia.com/secunia_research/2009-63/http://secunia.com/secunia_research/2010-1/http://securitytracker.com/id?1023481https://exchange.xforce.ibmcloud.com/vulnerabilities/55759https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8538http://www.adobe.com/support/security/bulletins/apsb10-03.htmlhttp://www.securityfocus.com/archive/1/509053/100/0/threadedhttp://www.securityfocus.com/archive/1/509055/100/0/threadedhttp://www.securityfocus.com/archive/1/509058/100/0/threadedhttp://www.securityfocus.com/bid/37872