CVE-2012-0771

moderate-risk
Published 2018-02-19

Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0759.

Do I need to act?

~
6.1% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10 High
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Adobe

References (3)

Vendor Advisory https://www.adobe.com/support/security/bulletins/apsb12-02.html
Third Party Advisory https://fortiguard.com/encyclopedia/ips/31101/adobe-shockwave-player-multiple-me...
Vendor Advisory https://www.adobe.com/support/security/bulletins/apsb12-02.html
44
/ 100
moderate-risk
Severity 30/34 · Critical
Exploitability 9/34 · Low
Exposure 5/34 · Minimal