CVE-2010-0128 Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director before 11.5.7.609 allows remote attackers to cause a denial of service (memory corruption) or poss...
HighCVSS 9.3
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director before 11.5.7.609 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir file that triggers an invalid read operation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe director | < 11.5.7.609 | 11.5.7.609 |
| Adobe shockwave player | <= 11.5.6.606 | No fix listed |
References
- 38751 broken-link third-party-advisory vendor-advisory
- secunia.com broken-link vendor-advisory
- www.adobe.com patch vendor-advisory
- www.coresecurity.com broken-link
- 20100511 [CORE-2010-0405] Adobe Director Invalid Read broken-link mailing-list vdb-entry
- 20100512 Secunia Research: Adobe Shockwave Player Signedness Error Vulnerability broken-link mailing-list vdb-entry
- ADV-2010-1128 broken-link vdb-entry vendor-advisory
- oval:org.mitre.oval:def:7273 signature tool-signature vdb-entry