CVE-2010-2871

  • Last update: Apr 13, 2023

Description

Integer overflow in the 3D object functionality in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted size value in a 0xFFFFFF45 RIFF record in a Director movie.

Software From Fixed in
adobe / shockwave_player - 11.5.7.609.x
adobe / shockwave_player 1.0 1.0.x
adobe / shockwave_player 10.0.0.210 10.0.0.210.x
adobe / shockwave_player 10.0.1.004 10.0.1.004.x
adobe / shockwave_player 10.1.0.011 10.1.0.011.x
adobe / shockwave_player 10.1.0.11 10.1.0.11.x
adobe / shockwave_player 10.1.1.016 10.1.1.016.x
adobe / shockwave_player 10.1.4.020 10.1.4.020.x
adobe / shockwave_player 10.2.0.021 10.2.0.021.x
adobe / shockwave_player 10.2.0.022 10.2.0.022.x
adobe / shockwave_player 10.2.0.023 10.2.0.023.x
adobe / shockwave_player 11.0.0.456 11.0.0.456.x
adobe / shockwave_player 11.0.3.471 11.0.3.471.x
adobe / shockwave_player 11.5.0.595 11.5.0.595.x
adobe / shockwave_player 11.5.0.596 11.5.0.596.x
adobe / shockwave_player 11.5.1.601 11.5.1.601.x
adobe / shockwave_player 11.5.2.602 11.5.2.602.x
adobe / shockwave_player 11.5.6.606 11.5.6.606.x
adobe / shockwave_player 2.0 2.0.x
adobe / shockwave_player 3.0 3.0.x
adobe / shockwave_player 4.0 4.0.x
adobe / shockwave_player 5.0 5.0.x
adobe / shockwave_player 6.0 6.0.x
adobe / shockwave_player 8.0 8.0.x
adobe / shockwave_player 8.0.196 8.0.196.x
adobe / shockwave_player 8.0.196a 8.0.196a.x
adobe / shockwave_player 8.0.204 8.0.204.x
adobe / shockwave_player 8.0.205 8.0.205.x
adobe / shockwave_player 8.5.1 8.5.1.x
adobe / shockwave_player 8.5.1.100 8.5.1.100.x
adobe / shockwave_player 8.5.1.103 8.5.1.103.x
adobe / shockwave_player 8.5.1.105 8.5.1.105.x
adobe / shockwave_player 8.5.1.106 8.5.1.106.x
adobe / shockwave_player 8.5.321 8.5.321.x
adobe / shockwave_player 8.5.323 8.5.323.x
adobe / shockwave_player 8.5.324 8.5.324.x
adobe / shockwave_player 8.5.325 8.5.325.x
adobe / shockwave_player 9 9.x
adobe / shockwave_player 9.0.383 9.0.383.x
adobe / shockwave_player 9.0.432 9.0.432.x

Details

    • Severity: High
  • CVE: CVE-2010-2871
  • Published: Aug 26, 2010
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs