VulnerabilityModified

CVE-2005-3525

Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and earlier allows remote attackers to execute arbitrary code via crafted large values for unspecified parameters.

HIGH 9.3EPSS 19.7%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 19.7%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.

Description

CVSS 2.0: 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS: 19.66% probability · 97th percentile
CISA KEV: Not listed
Affected: adobe/shockwave player
Source: cve@mitre.org

References

http://secunia.com/advisories/19009Vendor Advisory
http://securityreason.com/securityalert/481
http://securitytracker.com/id?1015673
http://www.kb.cert.org/vuls/id/437212US Government Resource
http://www.macromedia.com/devnet/security/security_zone/apsb06-02.html
http://www.osvdb.org/23461
http://www.securityfocus.com/archive/1/425900/100/0/threaded
http://www.securityfocus.com/bid/16791
http://www.vupen.com/english/advisories/2006/0716
http://www.zerodayinitiative.com/advisories/ZDI-06-002.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/24914
http://secunia.com/advisories/19009Vendor Advisory
http://securityreason.com/securityalert/481
http://securitytracker.com/id?1015673
http://www.kb.cert.org/vuls/id/437212US Government Resource
http://www.macromedia.com/devnet/security/security_zone/apsb06-02.html
http://www.osvdb.org/23461
http://www.securityfocus.com/archive/1/425900/100/0/threaded
http://www.securityfocus.com/bid/16791
http://www.vupen.com/english/advisories/2006/0716
http://www.zerodayinitiative.com/advisories/ZDI-06-002.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/24914

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.