9.3

CVE-2010-4196

The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Shockwave Player Version <= 11.5.9.615
Adobe ≫ Shockwave Player Version 1.0
Adobe ≫ Shockwave Player Version 2.0
Adobe ≫ Shockwave Player Version 3.0
Adobe ≫ Shockwave Player Version 4.0
Adobe ≫ Shockwave Player Version 5.0
Adobe ≫ Shockwave Player Version 6.0
Adobe ≫ Shockwave Player Version 8.0
Adobe ≫ Shockwave Player Version 8.0.196
Adobe ≫ Shockwave Player Version 8.0.196a
Adobe ≫ Shockwave Player Version 8.0.204
Adobe ≫ Shockwave Player Version 8.0.205
Adobe ≫ Shockwave Player Version 8.5.1
Adobe ≫ Shockwave Player Version 8.5.1.100
Adobe ≫ Shockwave Player Version 8.5.1.103
Adobe ≫ Shockwave Player Version 8.5.1.105
Adobe ≫ Shockwave Player Version 8.5.1.106
Adobe ≫ Shockwave Player Version 8.5.321
Adobe ≫ Shockwave Player Version 8.5.323
Adobe ≫ Shockwave Player Version 8.5.324
Adobe ≫ Shockwave Player Version 8.5.325
Adobe ≫ Shockwave Player Version 9
Adobe ≫ Shockwave Player Version 9.0.383
Adobe ≫ Shockwave Player Version 9.0.432
Adobe ≫ Shockwave Player Version 10.0.0.210
Adobe ≫ Shockwave Player Version 10.0.1.004
Adobe ≫ Shockwave Player Version 10.1.0.11
Adobe ≫ Shockwave Player Version 10.1.0.011
Adobe ≫ Shockwave Player Version 10.1.1.016
Adobe ≫ Shockwave Player Version 10.1.4.020
Adobe ≫ Shockwave Player Version 10.2.0.021
Adobe ≫ Shockwave Player Version 10.2.0.022
Adobe ≫ Shockwave Player Version 10.2.0.023
Adobe ≫ Shockwave Player Version 11.0.0.456
Adobe ≫ Shockwave Player Version 11.0.3.471
Adobe ≫ Shockwave Player Version 11.5.0.595
Adobe ≫ Shockwave Player Version 11.5.0.596
Adobe ≫ Shockwave Player Version 11.5.1.601
Adobe ≫ Shockwave Player Version 11.5.2.602
Adobe ≫ Shockwave Player Version 11.5.6.606
Adobe ≫ Shockwave Player Version 11.5.7.609
Adobe ≫ Shockwave Player Version 11.5.8.612
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.56% 0.919
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.adobe.com/support/security/bulletins/apsb11-01.html
Patch
Vendor Advisory
http://www.securitytracker.com/id?1025056
http://www.vupen.com/english/advisories/2011/0335
Vendor Advisory
http://www.kb.cert.org/vuls/id/189929
US Government Resource
http://www.securityfocus.com/bid/46338