Vulnerability Management

Adobe updates Shockwave

Share

Adobe on Tuesday released a new Shockwave Player version to address a “critical” vulnerability that could allow an attacker to remotely take control of an affected system. The vulnerability affects Shockwave Player 11.5.0.596 and all earlier versions running on the Windows platform. Adobe recommended users install the updated version, 11.5.0.600. The US-CERT also encouraged users to upgrade. — AM

Related

Critical Apache OFBiz flaw patched

Such a vulnerability evades fixes issued for previous OFBiz bugs, tracked as CVE-2024-38856, CVE-2024-36104, and CVE-2024-32113, all of which have resulted from a fragmentation issue within the controller-view map that could allow unauthenticated remote code or SQL query execution, according to Rapid7 security researchers.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.