CVE-2011-2120: Adobe Shockwave Player

High severity, CVSS 9.3. EPSS: 4.6% chance of exploitation in the next 30 days.

Integer overflow in the CursorAsset x32 component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.

Affected products

• Adobe Shockwave Player: up to and including 11.5.9.620; version 1.0 only; version 2.0 only; version 3.0 only; version 4.0 only; version 5.0 only; …

Published 2011-06-16. Last modified 2026-06-16.