Adobe Shockwave Player Multiple Unspecified Memory Corruption Vulnerabilities

Bugtraq ID:	107822
Class:	Unknown
CVE:	CVE-2019-7098 CVE-2019-7099 CVE-2019-7100 CVE-2019-7101 CVE-2019-7102 CVE-2019-7103 CVE-2019-7104
Remote:	Yes
Local:	No
Published:	Apr 09 2019 12:00AM
Updated:	Apr 09 2019 12:00AM
Credit:	Honggang Ren of Fortinet's FortiGuard Labs.
Vulnerable:	Adobe Shockwave Player 12.0.7 149 Adobe Shockwave Player 11.6.6 636 Adobe Shockwave Player 11.6.5 635 Adobe Shockwave Player 11.5.7 .609 Adobe Shockwave Player 11.5.6 .606 Adobe Shockwave Player 11.5.2 .606 Adobe Shockwave Player 11.5.2 .602 Adobe Shockwave Player 11.5.1 .601 Adobe Shockwave Player 11.5 .601 Adobe Shockwave Player 11.5 .600 Adobe Shockwave Player 11.5 .596 Adobe Shockwave Player 10.2 .023 Adobe Shockwave Player 9.0.432 Adobe Shockwave Player 9.0.383 Adobe Shockwave Player 8.5.325 Adobe Shockwave Player 8.5.324 Adobe Shockwave Player 8.5.323 Adobe Shockwave Player 8.5.321 Adobe Shockwave Player 8.0.205 Adobe Shockwave Player 8.0.204 Adobe Shockwave Player 8.0.196 Adobe Shockwave Player 9 Adobe Shockwave Player 8.5.1.106 Adobe Shockwave Player 8.5.1.105 Adobe Shockwave Player 8.5.1.103 Adobe Shockwave Player 8.5.1.100 Adobe Shockwave Player 5.0 Adobe Shockwave Player 12.3.4.204 Adobe Shockwave Player 12.3.1.201 Adobe Shockwave Player 12.2.9.199 Adobe Shockwave Player 12.2.8.198 Adobe Shockwave Player 12.2.7.197 Adobe Shockwave Player 12.2.1.171 Adobe Shockwave Player 12.2.0.162 Adobe Shockwave Player 12.1.9.160 Adobe Shockwave Player 12.1.9.159 Adobe Shockwave Player 12.1.8.158 Adobe Shockwave Player 12.1.0.150 Adobe Shockwave Player 12.0.9.149 Adobe Shockwave Player 12.0.7.148 Adobe Shockwave Player 12.0.6.147 Adobe Shockwave Player 12.0.4.144 Adobe Shockwave Player 12.0.3.133 Adobe Shockwave Player 12.0.2.122 Adobe Shockwave Player 12.0.0.112 Adobe Shockwave Player 11.6.8.638 Adobe Shockwave Player 11.6.7.637 Adobe Shockwave Player 11.6.4.634 Adobe Shockwave Player 11.6.3.633 Adobe Shockwave Player 11.6.1.629 Adobe Shockwave Player 11.6.0.626 Adobe Shockwave Player 11.5.9.620 Adobe Shockwave Player 11.5.9.615 Adobe Shockwave Player 11.5.8.612 Adobe Shockwave Player 11.5.10.620 Adobe Shockwave Player 11.5.0.595 Adobe Shockwave Player 11.0.3.471 Adobe Shockwave Player 11.0.0.456 Adobe Shockwave Player 11 Adobe Shockwave Player 10.2.0.022 Adobe Shockwave Player 10.2.0.021 Adobe Shockwave Player 10.1.4.020 Adobe Shockwave Player 10.1.1.016 Adobe Shockwave Player 10.1.0.011 Adobe Shockwave Player 10.0.1.004 Adobe Shockwave Player 10.0.0.210 Adobe Shockwave Player 10
Not Vulnerable:	Adobe Shockwave Player 12.3.5.205

Adobe Shockwave Player Multiple Unspecified Memory Corruption Vulnerabilities

Adobe Shockwave Player is prone to multiple unspecified remote memory-corruption vulnerabilities.

An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

Adobe Shockwave Player versions 12.3.4.204 and prior are vulnerable.

Adobe Shockwave Player Multiple Unspecified Memory Corruption Vulnerabilities

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Shockwave Player Multiple Unspecified Memory Corruption Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Adobe Shockwave Player Multiple Unspecified Memory Corruption Vulnerabilities

References:

• Adobe Homepage (Adobe)
  
• Security update available for Adobe Shockwave Player | APSB19-20 (Adobe)