CVE-2011-2449

Published: Nov 8, 2011Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The TextXtra module in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Affected (45)

Products: Adobe: Shockwave Player

Adobe

1 product

Shockwave Player

Configuration A

45 vulnerable

Vulnerable Software	Affected Versions
Adobe Shockwave Player	Up to 11.6.1.629
Adobe Shockwave Player	Version 1.0
Adobe Shockwave Player	Version 10.0.0.210
Adobe Shockwave Player	Version 10.0.1.004
Adobe Shockwave Player	Version 10.1.0.011
Adobe Shockwave Player	Version 10.1.0.11
Adobe Shockwave Player	Version 10.1.1.016
Adobe Shockwave Player	Version 10.1.4.020
Adobe Shockwave Player	Version 10.2.0.021
Adobe Shockwave Player	Version 10.2.0.022
Adobe Shockwave Player	Version 10.2.0.023
Adobe Shockwave Player	Version 11.0.0.456
Adobe Shockwave Player	Version 11.0.3.471
Adobe Shockwave Player	Version 11.5.0.595
Adobe Shockwave Player	Version 11.5.0.596
Adobe Shockwave Player	Version 11.5.1.601
Adobe Shockwave Player	Version 11.5.2.602
Adobe Shockwave Player	Version 11.5.6.606
Adobe Shockwave Player	Version 11.5.7.609
Adobe Shockwave Player	Version 11.5.8.612
Adobe Shockwave Player	Version 11.5.9.615
Adobe Shockwave Player	Version 11.5.9.620
Adobe Shockwave Player	Version 11.6.0.626
Adobe Shockwave Player	Version 2.0
Adobe Shockwave Player	Version 3.0
Adobe Shockwave Player	Version 4.0
Adobe Shockwave Player	Version 5.0
Adobe Shockwave Player	Version 6.0
Adobe Shockwave Player	Version 8.0.196
Adobe Shockwave Player	Version 8.0.196a
Adobe Shockwave Player	Version 8.0.204
Adobe Shockwave Player	Version 8.0.205
Adobe Shockwave Player	Version 8.0
Adobe Shockwave Player	Version 8.5.1.100
Adobe Shockwave Player	Version 8.5.1.103
Adobe Shockwave Player	Version 8.5.1.105
Adobe Shockwave Player	Version 8.5.1.106
Adobe Shockwave Player	Version 8.5.1
Adobe Shockwave Player	Version 8.5.321
Adobe Shockwave Player	Version 8.5.323
Adobe Shockwave Player	Version 8.5.324
Adobe Shockwave Player	Version 8.5.325
Adobe Shockwave Player	Version 9.0.383
Adobe Shockwave Player	Version 9.0.432
Adobe Shockwave Player	Version 9

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (4)

http://www.adobe.com/support/security/bulletins/apsb11-27.html

Source: psirt@adobe.com

PatchVendor Advisory

http://www.securitytracker.com/id?1026288

Source: psirt@adobe.com

http://www.adobe.com/support/security/bulletins/apsb11-27.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securitytracker.com/id?1026288

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.