Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-1292
HistoryMay 13, 2010 - 5:30 p.m.

CVE-2010-1292

2010-05-1317:30:02
CWE-119
[email protected]
web.nvd.nist.gov
3

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.185 Low

EPSS

Percentile

96.3%

JSON

The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file.

Affected configurations

NVD
Node
adobeshockwave_playerRange≤11.5.6.606
OR
adobeshockwave_playerMatch1.0
OR
adobeshockwave_playerMatch2.0
OR
adobeshockwave_playerMatch3.0
OR
adobeshockwave_playerMatch4.0
OR
adobeshockwave_playerMatch5.0
OR
adobeshockwave_playerMatch6.0
OR
adobeshockwave_playerMatch8.0
OR
adobeshockwave_playerMatch8.5.1
OR
adobeshockwave_playerMatch9
OR
adobeshockwave_playerMatch10.1.0.11
OR
adobeshockwave_playerMatch11.0.0.456
OR
adobeshockwave_playerMatch11.5.0.595
OR
adobeshockwave_playerMatch11.5.0.596
OR
adobeshockwave_playerMatch11.5.1.601
OR
adobeshockwave_playerMatch11.5.2.602
AND
applemacos
OR
microsoftwindows
Node
adobeshockwave_playerMatch-
AND
microsoftwindows_7Match-
OR
microsoftwindows_server_2003Match-
OR
microsoftwindows_server_2008Match-
OR
microsoftwindows_vistaMatch-

Related

zdi 1
checkpoint_advisories 3
cvelist 1
securityvulns 3
prion 1
cve 1
openvas 2
nessus 2
zdi
zdi
Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability
2010-05-11 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Shockwave Player DIR Files PAMI Chunk Code Execution (APSB10-12; CVE-2010-1292)
2010-05-23 00:00:00
Update Protection against Adobe Shockwave Player DIR Files PAMI Chunk Code Execution Vulnerability (APSB10-12)
2010-05-26 00:00:00
Adobe Director Files (CVE-2010-0127; CVE-2010-0128; CVE-2010-0129; CVE-2010-0130; CVE-2010-0986; CVE-2010-0987; CVE-2010-1280; CVE-2010-1281; CVE-2010-1282; CVE-2010-1283; CVE-2010-1284; CVE-2010-1286; CVE-2010-1287; CVE-2010-1288; CVE-2010-1289; CVE-2010-1290; CVE-2010-1291; CVE-2010-1292)
2010-05-17 00:00:00
cvelist
cvelist
CVE-2010-1292
2010-05-13 17:00:00
securityvulns
securityvulns
ZDI-10-089: Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability
2010-05-12 00:00:00
Adobe Shockwave multiple security vulnerabilities
2010-05-21 00:00:00
Security update available for Shockwave Player
2010-05-12 00:00:00
prion
prion
Memory corruption
2010-05-13 17:30:00
cve
cve
CVE-2010-1292
2010-05-13 17:30:02
openvas
openvas
Adobe Shockwave Player Multiple Remote Code Execution Vulnerabilities (May 2010)
2010-05-19 00:00:00
Adobe Shockwave Player Multiple Remote Code Execution Vulnerabilities May-10
2010-05-19 00:00:00
nessus
nessus
Adobe Shockwave Player <= 11.5.6.606 Multiple Vulnerabilities (APSB10-12) (Mac OS X)
2014-12-22 00:00:00
Shockwave Player < 11.5.7.609 Multiple Vulnerabilities (APSB10-12)
2010-05-12 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.185 Low

EPSS

Percentile

96.3%

JSON
Related for NVD:CVE-2010-1292
zdi1checkpoint_advisories3cvelist1securityvulns3prion1cve1openvas2nessus2