cbcvebase.
CVE-2010-4092
published 2010-11-05

CVE-2010-4092: Use-after-free vulnerability in an unspecified compatibility component in Adobe Shockwave Player before 11.5.9.620 allows user-assisted remote attackers to…

PriorityP342critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
5.45%
91.8th percentile
Use-after-free vulnerability in an unspecified compatibility component in Adobe Shockwave Player before 11.5.9.620 allows user-assisted remote attackers to execute arbitrary code via a crafted web site, related to the Shockwave Settings window and an unloaded library. NOTE: some of these details are obtained from third party information.

Affected

42 ranges· showing 25
VendorProductVersion rangeFixed in
adobeshockwave_player<= 11.5.9.615
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
adobeshockwave_player
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.