CVE-2011-2123

Integer overflow in the Shockwave 3D Asset x32 component in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code via a crafted subrecord in a DEMX chunk, which triggers a heap-based buffer overflow.

• CWE-189

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=922
• http://www.adobe.com/support/security/bulletins/apsb11-17.htmlPatch, Vendor Advisory
• http://www.us-cert.gov/cas/techalerts/TA11-166A.htmlUS Government Resource
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=922
• http://www.adobe.com/support/security/bulletins/apsb11-17.htmlPatch, Vendor Advisory
• http://www.us-cert.gov/cas/techalerts/TA11-166A.htmlUS Government Resource

Published

Jun 16, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-2117Adobe Shockwave Player before 11.6.0.626 allows attackers to…
• CVE-2011-2118The FLV ASSET Xtra component in Adobe Shockwave Player befor…
• CVE-2011-2119Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allow…
• CVE-2011-2120Integer overflow in the CursorAsset x32 component in Adobe S…
• CVE-2011-2121Integer overflow in Adobe Shockwave Player before 11.6.0.626…
• CVE-2011-2122Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allow…
• CVE-2011-2124Adobe Shockwave Player before 11.6.0.626 allows attackers to…
• CVE-2011-2125Buffer overflow in Dirapix.dll in Adobe Shockwave Player bef…
• CVE-2011-2126Buffer overflow in Adobe Shockwave Player before 11.6.0.626 …
• CVE-2011-2127Adobe Shockwave Player before 11.6.0.626 allows attackers to…
• CVE-2011-2128Adobe Shockwave Player before 11.6.0.626 allows attackers to…
• CVE-2011-2129Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…