CVE-2011-2118: Adobe Shockwave Player

High severity, CVSS 9.3. EPSS: 4.6% chance of exploitation in the next 30 days.

The FLV ASSET Xtra component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to an "input validation vulnerability."

Affected products

• Adobe Shockwave Player: up to and including 11.5.9.620; version 1.0 only; version 2.0 only; version 3.0 only; version 4.0 only; version 5.0 only; …

Published 2011-06-16. Last modified 2026-06-16.