← Database

CVE-2009-4002

CRITICAL CVSS: 9.3 Published: 2010-01-21 Modified: 2026-06-16

Description

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file.

Affected Platforms

Adobe Shockwave Player

Weakness Type

CWE-119

References