Lucene search

[email protected]CVE-2010-4092

HistoryNov 05, 2010 - 9:00 p.m.

CVE-2010-4092

2010-11-0521:00:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2010-4092

use-after-free vulnerability

adobe shockwave player

remote code execution

crafted web site

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.054 Low

EPSS

Percentile

93.0%

JSON

Use-after-free vulnerability in an unspecified compatibility component in Adobe Shockwave Player before 11.5.9.620 allows user-assisted remote attackers to execute arbitrary code via a crafted web site, related to the Shockwave Settings window and an unloaded library. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
adobe:shockwave_playeradobe shockwave playereq8.5.324
adobe:shockwave_playeradobe shockwave playereq5.0
adobe:shockwave_playeradobe shockwave playereq4.0
adobe:shockwave_playeradobe shockwave playereq8.5.1
adobe:shockwave_playeradobe shockwave playereq10.1.4.020
adobe:shockwave_playeradobe shockwave playereq11.5.1.601
adobe:shockwave_playeradobe shockwave playereq11.0.0.456
adobe:shockwave_playeradobe shockwave playereq6.0
adobe:shockwave_playeradobe shockwave playerle11.5.9.615
adobe:shockwave_playeradobe shockwave playereq8.0.204

CPE	Name	Operator	Version
adobe:shockwave_player	adobe shockwave player	eq	8.5.324
adobe:shockwave_player	adobe shockwave player	eq	5.0
adobe:shockwave_player	adobe shockwave player	eq	4.0
adobe:shockwave_player	adobe shockwave player	eq	8.5.1
adobe:shockwave_player	adobe shockwave player	eq	10.1.4.020
adobe:shockwave_player	adobe shockwave player	eq	11.5.1.601
adobe:shockwave_player	adobe shockwave player	eq	11.0.0.456
adobe:shockwave_player	adobe shockwave player	eq	6.0
adobe:shockwave_player	adobe shockwave player	le	11.5.9.615
adobe:shockwave_player	adobe shockwave player	eq	8.0.204

Rows per page:

1-10 of 421

References

osvdb.org/68982

secunia.com/advisories/42112

www.adobe.com/support/security/bulletins/apsb11-01.html

www.securityfocus.com/bid/44617

www.securitytracker.com/id?1025056

www.vupen.com/english/advisories/2011/0335

exchange.xforce.ibmcloud.com/vulnerabilities/62978

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11548

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.054 Low

EPSS

Percentile

93.0%

JSON

Related for CVE-2010-4092

openvas4 prion1 nessus2 securityvulns2