KLA11043 Arbitrary code execution vulnerability in Adobe Shockwave Player

A memory corruption vulnerability was found in Adobe Shockwave Player versions earlier than 12.2.9.199. By exploiting this vulnerability malicious users can execute arbitrary code.

Original advisories

Adobe Security Bulletin

Related products

Adobe-Shockwave-Player

CVE list

CVE-2017-3086 critical

Solution

Update to the latest version

Download Adobe Shockwave Player

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Adobe Shockwave Player earlier than 12.2.9.199