PT-2010-4127 · Adobe · Shockwave Player

Publicado 2010-10-29 · Atualizado 2018-10-10 · CVE-2010-2582

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.5.9.615

Description The issue arises from an unspecified function in TextXtra.x32 that fails to properly reallocate a buffer when processing a DEMX chunk in a Director file. This failure can lead to a heap-based buffer overflow, allowing remote attackers to execute arbitrary code.

Recommendations For versions prior to 11.5.9.615, update to version 11.5.9.615 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-2582

Produtos afetados

Shockwave Player

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2010-2582 · Nota de Segurança
• http://securityfocus.com/archive/1/514560/100/0/threaded · Nota
• http://secunia.com/secunia_research/2010-114 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12078 · Nota
• http://securitytracker.com/id?1024664 · Nota
• http://adobe.com/support/security/bulletins/apsb10-25.html · Aviso do Fabricante