CVE-2010-4192Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe Shockwave Player

Severity
9.3CRITICALNVD
EPSS
4.3%
top 11.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 10
Latest updateMay 14

Description

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted 3D Assets 0xFFFFFF88 type record that triggers an incorrect memory allocation, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, and CVE-2010-4306.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

NVDadobe/shockwave_player11.5.9.615+41

Patches

🔴Vulnerability Details

2
GHSA
GHSA-5w4p-h578-jm2v: Adobe Shockwave Player before 112022-05-14
CVEList
CVE-2010-4192: Adobe Shockwave Player before 112011-02-10
CVE-2010-4192 — Adobe Shockwave Player vulnerability | cvebase