CVE-2010-1283

 

Published at: - 13-05-2010 07:30

Last modified: - 20-10-2022 08:52

Total changes: - 5

Description

Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir (aka Director) files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a modified field in a 0xFFFFFF49 record.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• ADV-2010-1128-Permissions Required, Third Party Advisory
• 38751-Third Party Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-10-088/
• http://www.adobe.com/support/security/bulletins/apsb10-12.html
• oval:org.mitre.oval:def:7262-Third Party Advisory, Tool Signature
• 20100511 ZDI-10-088: Adobe Shockwave Player 3D Parsing Memory Corruption Vulnerability-Third Party Advisory, VDB Entry

 

Keywords

NVD

 

CVE-2010-1283

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures