CVE-2011-2108

CRITICAL 9.3CVE-2011-2108 · Published 16/06/2011 · updated 16/06/2026

In short

CVE-2011-2108 is a CRITICAL (CVSS 9.3) vulnerability affecting shockwave player (adobe).
Chance of exploitation in the next 30 days (EPSS): 5.6%, higher than 92.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
shockwave player adobe	`= 1.0= 10.0.0.210= 10.0.1.004= 10.1.0.011= 10.1.0.11= 10.1.1.016= 10.1.4.020= 10.2.0.021= 10.2.0.022= 10.2.0.023= 11.0.0.456= 11.0.3.471= 11.5.0.595= 11.5.0.596= 11.5.1.601= 11.5.2.602= 11.5.6.606= 11.5.7.609= 11.5.8.612= 11.5.9.615= 2.0= 3.0= 4.0= 5.0= 6.0= 8.0= 8.0.196= 8.0.196a= 8.0.204= 8.0.205= 8.5.1= 8.5.1.100= 8.5.1.103= 8.5.1.105= 8.5.1.106= 8.5.321= 8.5.323= 8.5.324= 8.5.325= 9= 9.0.383= 9.0.432≤ 11.5.9.620`	No fix yet

Description

Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to a "design flaw."

References

osvdb.org/73012
adobe.com/support/security/bulletins/apsb11-17.html · Patch
securityfocus.com/bid/48311
us-cert.gov/cas/techalerts/TA11-166A.html · US Government Resource
exchange.xforce.ibmcloud.com/vulnerabilities/68033

More vulnerabilities in shockwave player

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

shockwave player

adobe

= 1.0= 10.0.0.210= 10.0.1.004= 10.1.0.011= 10.1.0.11= 10.1.1.016= 10.1.4.020= 10.2.0.021= 10.2.0.022= 10.2.0.023= 11.0.0.456= 11.0.3.471= 11.5.0.595= 11.5.0.596= 11.5.1.601= 11.5.2.602= 11.5.6.606= 11.5.7.609= 11.5.8.612= 11.5.9.615= 2.0= 3.0= 4.0= 5.0= 6.0= 8.0= 8.0.196= 8.0.196a= 8.0.204= 8.0.205= 8.5.1= 8.5.1.100= 8.5.1.103= 8.5.1.105= 8.5.1.106= 8.5.321= 8.5.323= 8.5.324= 8.5.325= 9= 9.0.383= 9.0.432≤ 11.5.9.620

No fix yet

More vulnerabilities in shockwave player

See all →