CVE-2009-3244

CVE-2009-3244 describes a heap-based buffer overflow in the SwDir.dll ActiveX control within Adobe Shockwave Player versions 11.5.1.601 and earlier. This critical vulnerability, with a CVSS score of 9.3, allows remote attackers to trigger a denial of service and potentially execute arbitrary code by supplying an excessively long PlayerVersion property value. While not listed in CISA's KEV catalog, public exploit code exists on ExploitDB, indicating a clear path for exploitation. Despite the high risk, there is no evidence of active exploitation or significant community discussion, suggesting it may not be widely targeted in current threat landscapes.