CVE-2010-4189

2011-02-1016:00:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2010-4189

adobe shockwave player

iml32 module

arbitrary code execution

denial of service

memory corruption

nvd

7.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.032 Low

EPSS

Percentile

91.1%

JSON

The IML32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie containing a GIF image with a crafted global color table size value, which causes an out-of-range pointer offset.

CPENameOperatorVersion
adobe:shockwave_playeradobe shockwave playereq8.5.324
adobe:shockwave_playeradobe shockwave playereq5.0
adobe:shockwave_playeradobe shockwave playereq4.0
adobe:shockwave_playeradobe shockwave playereq8.5.1
adobe:shockwave_playeradobe shockwave playereq10.1.4.020
adobe:shockwave_playeradobe shockwave playereq11.5.1.601
adobe:shockwave_playeradobe shockwave playereq11.0.0.456
adobe:shockwave_playeradobe shockwave playereq6.0
adobe:shockwave_playeradobe shockwave playerle11.5.9.615
adobe:shockwave_playeradobe shockwave playereq8.0.204

CPE	Name	Operator	Version
adobe:shockwave_player	adobe shockwave player	eq	8.5.324
adobe:shockwave_player	adobe shockwave player	eq	5.0
adobe:shockwave_player	adobe shockwave player	eq	4.0
adobe:shockwave_player	adobe shockwave player	eq	8.5.1
adobe:shockwave_player	adobe shockwave player	eq	10.1.4.020
adobe:shockwave_player	adobe shockwave player	eq	11.5.1.601
adobe:shockwave_player	adobe shockwave player	eq	11.0.0.456
adobe:shockwave_player	adobe shockwave player	eq	6.0
adobe:shockwave_player	adobe shockwave player	le	11.5.9.615
adobe:shockwave_player	adobe shockwave player	eq	8.0.204