The current release of the software, version 12.2.0.162, resolves both of these security issues. 8 security bulletin, all of the Adobe Shockwave Player version 12.1.9.160 and earlier releases are affected by these vulnerabilities. While not as popular as Flash Player, Shockwave Player is installed on 450 million Internet-enabled desktops, according to statistics from Adobe, which potentially makes it an attractive target for attackers.Adobe has released an updated version of its popular Shockwave Player for Windows to resolve two critical vulnerabilities newly discovered in the product.ĭiscovered by Tongbo Luo of Palo Alto Networks, the two memory corruption vulnerabilities (CVE-2015-6680 and CVE-2015-6681) have been rated “critical” and have received a priority level 1, because they could enable an attacker to take control over an affected systems and execute malicious code.Īccording to Adobe’s Sept. Adobe Reader and Acrobat X for Windows and Mac have also been updated to version 10.1.8.Īdobe's Shockwave Player, an application required to display online content created with Adobe's Director software was updated to version 12.0.4.144 for Windows and Mac to address two memory corruption vulnerabilities that can lead to arbitrary code execution. Users of Adobe Reader or Acrobat XI for Windows and Mac OS X are advised to upgrade to Adobe Reader XI (11.0.04) or Adobe Acrobat XI (11.0.04), respectively.

New versions of Adobe Reader and Adobe Acrobat XI and X were released to address eight arbitrary code execution vulnerabilities: three memory corruption issues, two buffer overflows, two integer overflows and one stack overflow. of AIR and AIR SDK (software development kit) for Windows, Mac OS X and Android. The same Flash Player vulnerabilities were patched in Adobe AIR, a runtime for rich Internet applications that also bundles Flash Player.

Adobe shockwave updates