CVE-2007-5941

CVE-2007-5941 describes a critical stack-based buffer overflow vulnerability in the SWCtl.SWCtl ActiveX control within Adobe Shockwave Player. Remote attackers can exploit this flaw by providing a long argument to the ShockwaveVersion method, leading to a denial of service or potentially arbitrary code execution. With a CVSS score of 10.0, this vulnerability is easily exploitable over a network with no authentication required, allowing for complete compromise of confidentiality, integrity, and availability. While not currently on the KEV catalog or Hot List, a proof-of-concept exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.