CVE-2010-1292

🗓️ 13 May 2010 17:00:00Reported by adobeType

The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, allowing remote attackers to execute arbitrary code or cause a denial of service

Reporter	Title	Published	Views	Family All 15
Check Point Advisories	Adobe Shockwave Player DIR Files PAMI Chunk Code Execution (APSB10-12; CVE-2010-1292)	23 May 201000:00	–	checkpoint_advisories
Check Point Advisories	Update Protection against Adobe Shockwave Player DIR Files PAMI Chunk Code Execution Vulnerability (APSB10-12)	26 May 201000:00	–	checkpoint_advisories
Check Point Advisories	Adobe Director Files (CVE-2010-0127; CVE-2010-0128; CVE-2010-0129; CVE-2010-0130; CVE-2010-0986; CVE-2010-0987; CVE-2010-1280; CVE-2010-1281; CVE-2010-1282; CVE-2010-1283; CVE-2010-1284; CVE-2010-1286; CVE-2010-1287; CVE-2010-1288; CVE-2010-1289; CVE-2010-1290; CVE-2010-1291; CVE-2010-1292)	17 May 201000:00	–	checkpoint_advisories
Cvelist	CVE-2010-1292	13 May 201017:00	–	cvelist
EUVD	EUVD-2010-1321	7 Oct 202500:30	–	euvd
Tenable Nessus	Adobe Shockwave Player <= 11.5.6.606 Multiple Vulnerabilities (APSB10-12) (Mac OS X)	22 Dec 201400:00	–	nessus
Tenable Nessus	Shockwave Player < 11.5.7.609 Multiple Vulnerabilities (APSB10-12)	12 May 201000:00	–	nessus
NVD	CVE-2010-1292	13 May 201017:30	–	nvd
OpenVAS	Adobe Shockwave Player Multiple Remote Code Execution Vulnerabilities (May 2010)	19 May 201000:00	–	openvas
OpenVAS	Adobe Shockwave Player Multiple Remote Code Execution Vulnerabilities May-10	19 May 201000:00	–	openvas

NVD

Node

adobe shockwave_playerRange≤11.5.6.606

adobe shockwave_playerMatch1.0

adobe shockwave_playerMatch2.0

adobe shockwave_playerMatch3.0

adobe shockwave_playerMatch4.0

adobe shockwave_playerMatch5.0

adobe shockwave_playerMatch6.0

adobe shockwave_playerMatch8.0

adobe shockwave_playerMatch8.5.1

adobe shockwave_playerMatch9

adobe shockwave_playerMatch10.1.0.11

adobe shockwave_playerMatch11.0.0.456

adobe shockwave_playerMatch11.5.0.595

adobe shockwave_playerMatch11.5.0.596

adobe shockwave_playerMatch11.5.1.601

adobe shockwave_playerMatch11.5.2.602

AND

apple macos

microsoft windows

Node

adobe shockwave_playerMatch-

AND

microsoft windows_7Match-

microsoft windows_server_2003Match-

microsoft windows_server_2008Match-

microsoft windows_vistaMatch-

Source	Link
securityfocus	www.securityfocus.com/archive/1/511242/100/0/threaded
vupen	www.vupen.com/english/advisories/2010/1128
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7416
secunia	www.secunia.com/advisories/38751
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-10-089/
adobe	www.adobe.com/support/security/bulletins/apsb10-12.html

29 Apr 2026 01:13Current

8.7High risk

Vulners AI Score8.7

CVSS 29.3

EPSS0.05854

CWE-119