CVE-2017-11294 in Shockwave

Summary

An issue was discovered in Adobe Shockwave 12.2.9.199 and earlier. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 07/13/2017
• Disclosure: 12/09/2017
• Moderation: VulDB entry created
• Entries: 1: VDB-110424
• CPE: ready
• CWE: CWE-119 (Confirmed)
• CVSS: 8.4
• EPSS: 0.03477
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-11294
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-11294
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-11294/