CVE-2009-3466

Published: Nov 4, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an "invalid string length vulnerability." NOTE: some of these details are obtained from third party information.

Affected (14)

Products: Adobe: Shockwave Player

Adobe

1 product

Shockwave Player

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Adobe Shockwave Player	Up to 11.5.1.601
Adobe Shockwave Player	Version 1.0
Adobe Shockwave Player	Version 10.1.0.11
Adobe Shockwave Player	Version 11.0.0.456
Adobe Shockwave Player	Version 11.5.0.595
Adobe Shockwave Player	Version 11.5.0.596
Adobe Shockwave Player	Version 2.0
Adobe Shockwave Player	Version 3.0
Adobe Shockwave Player	Version 4.0
Adobe Shockwave Player	Version 5.0
Adobe Shockwave Player	Version 6.0
Adobe Shockwave Player	Version 8.0
Adobe Shockwave Player	Version 8.5.1
Adobe Shockwave Player	Version 9