CVE-2010-0127
published 2010-05-13CVE-2010-0127: Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted…
PriorityP340high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
5.07%
91.3th percentile
Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted FFFFFF45h Shockwave 3D blocks in a Shockwave file.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | shockwave_player | < 11.5.7.609 | 11.5.7.609 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-2rgh-3c29-qm63: Adobe Shockwave Player before 11
ghsa_unreviewed·2022-05-02
CVE-2010-0127 [HIGH] CWE-787 GHSA-2rgh-3c29-qm63: Adobe Shockwave Player before 11
Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted FFFFFF45h Shockwave 3D blocks in a Shockwave file.
Red Hat
mysql: over-sized packet denial of service vulnerability
vendor_redhat·2010-05-13·CVSS 5.0
CVE-2010-1849 [MEDIUM] mysql: over-sized packet denial of service vulnerability
mysql: over-sized packet denial of service vulnerability
The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a large number of packets that exceed the maximum length.
Statement: This issue was fixed in mysql packages shipped with Red Hat Enterprise Linux 5 via RHSA-2012:0127. The mysql packages in Red Hat Enterprise Linux 6 include this fix since the initial release of the product.
Package: mysql (Red Hat Enterprise Linux 4) - Will not fix
Package: mysql (Red Hat Enterprise Linux 6) - Affected
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/38751http://secunia.com/secunia_research/2010-17/http://www.adobe.com/support/security/bulletins/apsb10-12.htmlhttp://www.securityfocus.com/archive/1/511260/100/0/threadedhttp://www.vupen.com/english/advisories/2010/1128https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7477http://secunia.com/advisories/38751http://secunia.com/secunia_research/2010-17/http://www.adobe.com/support/security/bulletins/apsb10-12.htmlhttp://www.securityfocus.com/archive/1/511260/100/0/threadedhttp://www.vupen.com/english/advisories/2010/1128https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7477
2010-05-13
Published