CVE-2017-11294

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Adobe Shockwave 12.2.9.199 and earlier. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	Adobe Shockwave 12.2.9.199 and earlier	Adobe Shockwave 12.2.9.199 and earlier

References

http://www.securityfocus.com/bid/101836Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039784Third Party Advisory, VDB Entry
https://helpx.adobe.com/security/products/shockwave/apsb17-40.htmlVendor Advisory
http://www.securityfocus.com/bid/101836Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039784Third Party Advisory, VDB Entry
https://helpx.adobe.com/security/products/shockwave/apsb17-40.htmlVendor Advisory

Timeline

Published: Dec 9, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-112959.8An issue was discovered in Adobe DNG Converter 9.12.1 and earlier versions. An exploitable memory corruption vulnerability exists. Successfu CVE-2017-112966.1An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. A cross-site scripting vulnerability in Apache Sling Servlets Post 2 CVE-2017-112975.3An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which c CVE-2017-112985.3An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which c CVE-2017-112995.3An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which c CVE-2017-11306.5IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it would open up many file CVE-2017-113005.3An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which c CVE-2017-113015.3An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which c CVE-2017-113029.8An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exp CVE-2017-113039.8An issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. An exploitable memory corruption vulnerability exists. Su CVE-2017-113049.8An issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. An exploitable use-after-free vulnerability exists. Succe CVE-2017-113056.5A regression affecting Adobe Flash Player version 27.0.0.187 (and earlier versions) causes the unintended reset of the global settings prefe