Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-4192
HistoryFeb 10, 2011 - 4:00 p.m.

CVE-2010-4192

2011-02-1016:00:13
CWE-119
[email protected]
web.nvd.nist.gov
24
cve-2010-4192
adobe shockwave player
memory corruption
cve-2011-0555
cve-2010-4093
cve-2010-4187
cve-2010-4190
cve-2010-4191
cve-2010-4306

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.06 Low

EPSS

Percentile

93.5%

JSON

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted 3D Assets 0xFFFFFF88 type record that triggers an incorrect memory allocation, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, and CVE-2010-4306.

Affected configurations

NVD
Node
adobeshockwave_playerRange≤11.5.9.615
OR
adobeshockwave_playerMatch1.0
OR
adobeshockwave_playerMatch2.0
OR
adobeshockwave_playerMatch3.0
OR
adobeshockwave_playerMatch4.0
OR
adobeshockwave_playerMatch5.0
OR
adobeshockwave_playerMatch6.0
OR
adobeshockwave_playerMatch8.0
OR
adobeshockwave_playerMatch8.0.196
OR
adobeshockwave_playerMatch8.0.196a
OR
adobeshockwave_playerMatch8.0.204
OR
adobeshockwave_playerMatch8.0.205
OR
adobeshockwave_playerMatch8.5.1
OR
adobeshockwave_playerMatch8.5.1.100
OR
adobeshockwave_playerMatch8.5.1.103
OR
adobeshockwave_playerMatch8.5.1.105
OR
adobeshockwave_playerMatch8.5.1.106
OR
adobeshockwave_playerMatch8.5.321
OR
adobeshockwave_playerMatch8.5.323
OR
adobeshockwave_playerMatch8.5.324
OR
adobeshockwave_playerMatch8.5.325
OR
adobeshockwave_playerMatch9
OR
adobeshockwave_playerMatch9.0.383
OR
adobeshockwave_playerMatch9.0.432
OR
adobeshockwave_playerMatch10.0.0.210
OR
adobeshockwave_playerMatch10.0.1.004
OR
adobeshockwave_playerMatch10.1.0.11
OR
adobeshockwave_playerMatch10.1.0.011
OR
adobeshockwave_playerMatch10.1.1.016
OR
adobeshockwave_playerMatch10.1.4.020
OR
adobeshockwave_playerMatch10.2.0.021
OR
adobeshockwave_playerMatch10.2.0.022
OR
adobeshockwave_playerMatch10.2.0.023
OR
adobeshockwave_playerMatch11.0.0.456
OR
adobeshockwave_playerMatch11.0.3.471
OR
adobeshockwave_playerMatch11.5.0.595
OR
adobeshockwave_playerMatch11.5.0.596
OR
adobeshockwave_playerMatch11.5.1.601
OR
adobeshockwave_playerMatch11.5.2.602
OR
adobeshockwave_playerMatch11.5.6.606
OR
adobeshockwave_playerMatch11.5.7.609
OR
adobeshockwave_playerMatch11.5.8.612

Related

prion 7
cvelist 7
cve 6
nvd 7
zdi 2
securityvulns 6
checkpoint_advisories 2
nessus 2
openvas 2
cert 1
prion
prion
Memory corruption
2011-02-10 16:00:00
Memory corruption
2011-02-10 16:00:00
Memory corruption
2011-02-10 16:00:00
cvelist
cvelist
CVE-2010-4191
2011-02-10 15:00:00
CVE-2010-4306
2011-02-10 15:00:00
CVE-2011-0555
2011-02-10 15:00:00
cve
cve
CVE-2010-4093
2011-02-10 16:00:12
CVE-2010-4306
2011-02-10 16:00:13
CVE-2010-4190
2011-02-10 16:00:12
nvd
nvd
CVE-2010-4190
2011-02-10 16:00:12
CVE-2010-4192
2011-02-10 16:00:13
CVE-2010-4306
2011-02-10 16:00:13
zdi
zdi
Adobe Shockwave Player FFFFFF88 Record Count Element Remote Code Execution Vulnerability
2011-02-08 00:00:00
Adobe Shockwave CSWV Chunk Substructure Offset Value Remote Code Execution Vulnerability
2011-02-08 00:00:00
securityvulns
securityvulns
ZDI-11-078: Adobe Shockwave Player FFFFFF88 Record Count Element Remote Code Execution Vulnerability
2011-02-11 00:00:00
Adobe Shockwave Player multiple security vulnerabilities
2011-02-14 00:00:00
Security update available for Shockwave Player
2011-02-11 00:00:00
checkpoint_advisories
checkpoint_advisories
Preemptive Protection against Adobe Shockwave Player Director File FFFFFF88 Record Parsing Remote Code Execution Vulnerabilities (APSB11-01)
2011-04-27 00:00:00
Adobe Shockwave Player Director File FFFFFF88 Record Integer Overflow (CVE-2010-2876; CVE-2010-4192)
2010-10-04 00:00:00
nessus
nessus
Adobe Shockwave Player <= 11.5.9.615 (APSB11-01) (Mac OS X)
2014-12-22 00:00:00
Shockwave Player < 11.5.9.620 (APSB11-01)
2011-02-10 00:00:00
openvas
openvas
Adobe Shockwave Player Multiple Remote Code Execution Vulnerabilities - Feb 2011
2011-02-15 00:00:00
Adobe Shockwave Player Multiple Remote Code Execution Vulnerabilities (Feb 2011)
2011-02-15 00:00:00
cert
cert
Adobe Shockwave 11.5.9.615 contains multiple memory corruption vulnerabilities
2011-02-11 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.06 Low

EPSS

Percentile

93.5%

JSON
Related for CVE-2010-4192
prion7cvelist7cve6nvd7zdi2securityvulns6checkpoint_advisories2nessus2openvas2cert1