CVE-2012-2047: Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of se...

Security readout for executives and security teams

CVE-2012-2047 is a memory corruption issue in Adobe Shockwave Player before 11.6.6.636. If a vulnerable installation is still present, an attacker could cause a crash or potentially run code. The sources do not identify active exploitation, affected platforms, or attack vectors. Exposure is likely limited to endpoints or browsers that still have Adobe Shockwave Player installed below version 11.6.6.636. The bundle does not provide CPEs, operating systems, or enterprise deployment indicators. Treat this as a legacy endpoint risk with high impact if present. The urgent task is not broad emergency response; it is confirming whether vulnerable Shockwave Player installations still exist and removing or updating them. Mitigation focus: Inventory systems for Adobe Shockwave Player installations.; Update Shockwave Player to version 11.6.6.636 or later if still required.; Remove Shockwave Player where there is no business need..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.