Adobe today updated Shockwave player, patching one privately disclosed memory corruption vulnerability in the software.
Adobe gave the vulnerability, CVE-2015-7649, its highest criticality rating, though there are no known public exploits for this flaw.
The vulnerability, Adobe said, could allow an attacker to remotely execute code and take control over the vulnerable machine.
The flaw affects Windows and Macintosh versions of Shockwave 12.2.0.162 and earlier, and users are urged to update to 12.2.1.171.
Adobe last updated Shockwave in September when it patched two critical vulnerabilities, both of which were memory corruption issues similar to today’s update.
