VULNERABILITY INTELLIGENCE
CVE-2010-1283
CVSS score8.8 HIGH
EPSS probability6.27%
CISA KEVNot currently listed
Published2010-05-13
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir (aka Director) files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a modified field in a 0xFFFFFF49 record.
Weakness classification
- CWE-787: Out-of-bounds Write
Primary references
- psirt@adobe.com — Third Party Advisory
- psirt@adobe.com — Patch, Vendor Advisory
- psirt@adobe.com — Third Party Advisory, VDB Entry
- psirt@adobe.com — Permissions Required, Third Party Advisory
- psirt@adobe.com — Third Party Advisory, VDB Entry
- psirt@adobe.com — Third Party Advisory, Tool Signature
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, Tool Signature