Lucene search

K
cve[email protected]CVE-2010-2875
HistoryAug 26, 2010 - 9:00 p.m.

CVE-2010-2875

2010-08-2621:00:00
CWE-189
web.nvd.nist.gov
32
adobe shockwave player
cve-2010-2875
integer signedness error
memory corruption
remote code execution
nvd

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.485 Medium

EPSS

Percentile

97.5%

Integer signedness error in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a length value associated with the tSAC chunk in a Director movie.

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.485 Medium

EPSS

Percentile

97.5%