CVE-2010-4087
published 2010-10-29CVE-2010-4087: IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a .dir…
PriorityP341critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
4.29%
90.0th percentile
IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a .dir file with a crafted mmap record containing an invalid length of a VSWV entry, a different vulnerability than CVE-2010-4089.
Affected
41 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | shockwave_player | <= 11.5.8.612 | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
| adobe | shockwave_player | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-cpcw-38mc-g2w6: IML32
ghsa_unreviewed·2022-05-14·CVSS 9.3
CVE-2010-4087 [CRITICAL] CWE-119 GHSA-cpcw-38mc-g2w6: IML32
IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a .dir file with a crafted mmap record containing an invalid length of a VSWV entry, a different vulnerability than CVE-2010-4089.
GHSA
GHSA-p9hm-764f-6864: IML32
ghsa_unreviewed·2022-05-14·CVSS 9.3
CVE-2010-4089 [CRITICAL] CWE-119 GHSA-p9hm-764f-6864: IML32
IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a .dir file containing "duplicated LCSM entries in mmap record," a different vulnerability than CVE-2010-4087.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.adobe.com/support/security/bulletins/apsb10-25.htmlhttp://www.securityfocus.com/archive/1/514581/100/0/threadedhttp://www.securitytracker.com/id?1024664https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12093http://www.adobe.com/support/security/bulletins/apsb10-25.htmlhttp://www.securityfocus.com/archive/1/514581/100/0/threadedhttp://www.securitytracker.com/id?1024664https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12093
2010-10-29
Published