9.3

CVE-2010-1283

EPSS 8.61%
Published 13.05.2010 17:30:02
Last modified 11.04.2025 00:51:21
Source psirt@adobe.com
Teams watchlist Login
Open Login

Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir (aka Director) files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a modified field in a 0xFFFFFF49 record.

Affected products Warnungen 0 Metrics 3 CWE 1 References 9

Data is provided by the National Vulnerability Database (NVD)

Adobe ≫ Shockwave Player Version < 11.5.7.609

Apple ≫ macOS
Microsoft ≫ Windows

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	8.61%	0.92

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

http://secunia.com/advisories/38751

Third Party Advisory

http://www.adobe.com/support/security/bulletins/apsb10-12.html

Patch

Vendor Advisory

http://www.vupen.com/english/advisories/2010/1128

Third Party Advisory

Permissions Required

http://www.securityfocus.com/archive/1/511253/100/0/threaded

Third Party Advisory

VDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-10-088/

Third Party Advisory

VDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7262

Third Party Advisory

Tool Signature

https://nvd.nist.gov/vuln/detail/CVE-2010-1283

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-1283

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-1283

EUVD