NVD

Id
50667  
Name
CVE-2009-3466  
Description
Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an "invalid string length vulnerability." NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-11-04  
Modified Date
2010-08-21  
Seq
2009-3466  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
256102 50667 CVE-2009-3466 oval:org.mitre.oval:def:6395  View
256103 50667 CVE-2009-3466 1023123  View
256104 50667 CVE-2009-3466 http://www.adobe.com/support/security/bulletins/apsb09-16.html  View
256105 50667 CVE-2009-3466 36905  View
256106 50667 CVE-2009-3466 ADV-2009-3134  View
256107 50667 CVE-2009-3466 shockwave-string-code-execution(54121)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41305 JVNDB-2009-002312 Adobe Shockwave Player の Web ページ処理における任意のコードを実行される脆弱性 Adobe Shockwave Player には、Web ページの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2009-3466 40897 CVE-2009-3466 50667 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002312.html 2009-11-03 2009-12-11 View