PT-2010-2986 · Adobe · Shockwave Player
CVE-2010-1281
·
Publicado
2010-05-11
·
Atualizado
2022-09-29
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Adobe Shockwave Player versions prior to 11.5.7.609
Description
The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption. This is achieved through a crafted .dir file that exploits the lack of validation of a certain value from a file, which is then used in file-pointer calculations.
Recommendations
For versions prior to 11.5.7.609, update to version 11.5.7.609 or later to resolve the issue.
Correção
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Shockwave Player