CVE-2010-1281

 

Published at: - 13-05-2010 07:30

Last modified: - 20-10-2022 08:52

Total changes: - 4

Description

iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• 38751-Broken Link, Vendor Advisory
• ADV-2010-1128-Broken Link, Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-10-087/
• http://www.adobe.com/support/security/bulletins/apsb10-12.html
• oval:org.mitre.oval:def:7268-Broken Link, Tool Signature
• 20100511 ZDI-10-087: Adobe Shockwave Invalid Offset Memory Corruption Remote Code Execution Vulnerability-Broken Link, VDB Entry

 

Keywords

NVD

 

CVE-2010-1281

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures