Integer overflow in the CursorAsset x32 component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.
Date: 2011-06
Affected: adobe/shockwave_player
Attack vector: rce
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2011-2120
CWE: CWE-189
CVSS: 9.3 ()

Integer overflow in the CursorAsset x32 component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.


Mitigations:

Architectural layers (MAESTRO):