CVE-2011-0335
Last modified
CVE-2011-0335 is a vulnerability of currently unknown severity. Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0319, CVE-2011-0320, CVE-2011-2119, and CVE-2011-2122.. EPSS estimates a 3.57% chance of exploitation in the next 30 days.
Description
Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0319, CVE-2011-0320, CVE-2011-2119, and CVE-2011-2122.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Shockwave Player | <= 11.5.9.620 |
| Adobe | Shockwave Player | 1.0 |
| Adobe | Shockwave Player | 2.0 |
| Adobe | Shockwave Player | 3.0 |
| Adobe | Shockwave Player | 4.0 |
| Adobe | Shockwave Player | 5.0 |
| Adobe | Shockwave Player | 6.0 |
| Adobe | Shockwave Player | 8.0 |
| Adobe | Shockwave Player | 8.0.196 |
| Adobe | Shockwave Player | 8.0.196a |
| Adobe | Shockwave Player | 8.0.204 |
| Adobe | Shockwave Player | 8.0.205 |
| Adobe | Shockwave Player | 8.5.1 |
| Adobe | Shockwave Player | 8.5.1.100 |
| Adobe | Shockwave Player | 8.5.1.103 |
| Adobe | Shockwave Player | 8.5.1.105 |
| Adobe | Shockwave Player | 8.5.1.106 |
| Adobe | Shockwave Player | 8.5.321 |
| Adobe | Shockwave Player | 8.5.323 |
| Adobe | Shockwave Player | 8.5.324 |
| Adobe | Shockwave Player | 8.5.325 |
| Adobe | Shockwave Player | 9 |
| Adobe | Shockwave Player | 9.0.383 |
| Adobe | Shockwave Player | 9.0.432 |
| Adobe | Shockwave Player | 10.0.0.210 |
| Adobe | Shockwave Player | 10.0.1.004 |
| Adobe | Shockwave Player | 10.1.0.11 |
| Adobe | Shockwave Player | 10.1.0.011 |
| Adobe | Shockwave Player | 10.1.1.016 |
| Adobe | Shockwave Player | 10.1.4.020 |
| Adobe | Shockwave Player | 10.2.0.021 |
| Adobe | Shockwave Player | 10.2.0.022 |
| Adobe | Shockwave Player | 10.2.0.023 |
| Adobe | Shockwave Player | 11.0.0.456 |
| Adobe | Shockwave Player | 11.0.3.471 |
| Adobe | Shockwave Player | 11.5.0.595 |
| Adobe | Shockwave Player | 11.5.0.596 |
| Adobe | Shockwave Player | 11.5.1.601 |
| Adobe | Shockwave Player | 11.5.2.602 |
| Adobe | Shockwave Player | 11.5.6.606 |
| Adobe | Shockwave Player | 11.5.7.609 |
| Adobe | Shockwave Player | 11.5.8.612 |
| Adobe | Shockwave Player | 11.5.9.615 |
References
- http://www.adobe.com/support/security/bulletins/apsb11-17.htmlPatch, Vendor Advisory
- http://www.us-cert.gov/cas/techalerts/TA11-166A.htmlUS Government Resource
- http://www.adobe.com/support/security/bulletins/apsb11-17.htmlPatch, Vendor Advisory
- http://www.us-cert.gov/cas/techalerts/TA11-166A.htmlUS Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-0335?
How severe is CVE-2011-0335?
How do I fix CVE-2011-0335?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-0329Directory traversal vulnerability in the GetData method in t…
- CVE-2011-0330The Dell DellSystemLite.Scanner ActiveX control in DellSyste…
- CVE-2011-0331Use-after-free vulnerability in the addOSPLext method in the…
- CVE-2011-0332Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit…
- CVE-2011-0333Heap-based buffer overflow in the NgwiCalVTimeZoneBody::Pars…
- CVE-2011-0334Stack-based buffer overflow in gwia.exe in GroupWise Interne…
- CVE-2011-0340Multiple buffer overflows in the ISSymbol ActiveX control in…
- CVE-2011-0341Stack-based buffer overflow in the pdfmoz_onmouse function i…
- CVE-2011-0342Multiple buffer overflows in the InduSoft ISSymbol ActiveX c…
- CVE-2011-0343Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when runnin…
- CVE-2011-0344Multiple stack-based buffer overflows in unspecified CGI pro…
- CVE-2011-0345Directory traversal vulnerability in the NMS server in Alcat…
Are you affected by CVE-2011-0335?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
