CVE-2012-5273: Adobe Shockwave Player

High severity, CVSS 10.0. EPSS: 8.6% chance of exploitation in the next 30 days.

Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4174, and CVE-2012-4175.

Affected products

• Adobe Shockwave Player: up to and including 11.6.7.637; version 1.0 only; version 2.0 only; version 3.0 only; version 4.0 only; version 5.0 only; …

Published 2012-10-23. Last modified 2026-06-16.