CVE-2014-0500

CRITICAL 10.0CVE-2014-0500 · Published 12/02/2014 · updated 17/06/2026

In short

CVE-2014-0500 is a CRITICAL (CVSS 10.0) vulnerability affecting shockwave player (adobe).
Chance of exploitation in the next 30 days (EPSS): 5.9%, higher than 93.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
shockwave player adobe	`= 11.0.0.456= 11.0.3.471= 11.5.0.595= 11.5.0.596= 11.5.1.601= 11.5.10.620= 11.5.2.602= 11.5.6.606= 11.5.7.609= 11.5.8.612= 11.5.9.615= 11.5.9.620= 11.6.0.626= 11.6.1.629= 11.6.3.633= 11.6.4.634= 11.6.5.635= 11.6.6.636= 11.6.7.637= 11.6.8.638= 12.0.0.112= 12.0.2.122= 12.0.3.133= 12.0.4.144= 12.0.6.147≤ 12.0.7.148`	No fix yet

Description

Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0501.

References

More vulnerabilities in shockwave player

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

shockwave player

adobe

= 11.0.0.456= 11.0.3.471= 11.5.0.595= 11.5.0.596= 11.5.1.601= 11.5.10.620= 11.5.2.602= 11.5.6.606= 11.5.7.609= 11.5.8.612= 11.5.9.615= 11.5.9.620= 11.6.0.626= 11.6.1.629= 11.6.3.633= 11.6.4.634= 11.6.5.635= 11.6.6.636= 11.6.7.637= 11.6.8.638= 12.0.0.112= 12.0.2.122= 12.0.3.133= 12.0.4.144= 12.0.6.147≤ 12.0.7.148

No fix yet

More vulnerabilities in shockwave player

See all →