CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
95.6%
dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director file containing a crafted pamm chunk with an invalid (1) size and (2) number of sub-chunks, a different vulnerability than CVE-2010-4084, CVE-2010-4085, CVE-2010-4086, and CVE-2010-4088.
Vendor | Product | Version | CPE |
---|---|---|---|
adobe | shockwave_player | * | cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:* |
adobe | shockwave_player | 1.0 | cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:* |
adobe | shockwave_player | 2.0 | cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:* |
adobe | shockwave_player | 3.0 | cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:* |
adobe | shockwave_player | 4.0 | cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:* |
adobe | shockwave_player | 5.0 | cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:* |
adobe | shockwave_player | 6.0 | cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:* |
adobe | shockwave_player | 8.0 | cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:* |
adobe | shockwave_player | 8.0.196 | cpe:2.3:a:adobe:shockwave_player:8.0.196:*:*:*:*:*:*:* |
adobe | shockwave_player | 8.0.196a | cpe:2.3:a:adobe:shockwave_player:8.0.196a:*:*:*:*:*:*:* |