Vulnerabilities > CVE-2009-2186 - Unspecified vulnerability in Adobe Shockwave Player

CVSS 9.3 - CRITICAL

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

adobe

critical

NVD

Published: 2009-06-25

Updated: 2009-07-01

Summary

Unspecified vulnerability in Adobe Shockwave Player before 11.0.0.465 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2009-1860, related to an older issue that "was previously resolved in Shockwave Player 11.0.0.465."

Vulnerable Configurations

Part	Description	Count
Application	Adobe Adobe Shockwave Player 1.0 Adobe Shockwave Player 2.0 Adobe Shockwave Player 3.0 Adobe Shockwave Player 4.0 Adobe Shockwave Player 5.0 Adobe Shockwave Player 6.0 Adobe Shockwave Player 8.0 Adobe Shockwave Player 8.5.1 Adobe Shockwave Player 9 Adobe Shockwave Player 10.1.0.11 Adobe Shockwave Player - Adobe Shockwave Player 8.0.196 Adobe Shockwave Player 8.0.196A Adobe Shockwave Player 8.0.204 Adobe Shockwave Player 8.0.205 Adobe Shockwave Player 8.5.1.100 Adobe Shockwave Player 8.5.1.103 Adobe Shockwave Player 8.5.1.105 Adobe Shockwave Player 8.5.1.106 Adobe Shockwave Player 8.5.321 Adobe Shockwave Player 8.5.323 Adobe Shockwave Player 8.5.324 Adobe Shockwave Player 8.5.325 Adobe Shockwave Player 9.0.383 Adobe Shockwave Player 9.0.432 Adobe Shockwave Player 10.0.0.210 Adobe Shockwave Player 10.0.1.004 Adobe Shockwave Player 10.1.0.011 Adobe Shockwave Player 10.1.1.016 Adobe Shockwave Player 10.1.4.020 Adobe Shockwave Player 10.2.0.021 Adobe Shockwave Player 10.2.0.022 Adobe Shockwave Player 10.2.0.023 Adobe Shockwave Player 11 Adobe Shockwave Player 11.0.0.456	35

References

http://www.adobe.com/support/security/bulletins/apsb09-08.html