CVE-2010-2867 DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly handle a certain return value associated with the rcsL chunk in a Director movie, which allows remote attackers to cause a den...
HighCVSS 9.3
EPSS 5.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly handle a certain return value associated with the rcsL chunk in a Director movie, which allows remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted movie, related to a "pointer offset vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe shockwave player | <= 11.5.7.609 | No fix listed |
| Adobe shockwave player | = 1.0 | No fix listed |
| Adobe shockwave player | = 2.0 | No fix listed |
| Adobe shockwave player | = 3.0 | No fix listed |
| Adobe shockwave player | = 4.0 | No fix listed |
| Adobe shockwave player | = 5.0 | No fix listed |
| Adobe shockwave player | = 6.0 | No fix listed |
| Adobe shockwave player | = 8.0 | No fix listed |
| Adobe shockwave player | = 8.0.196 | No fix listed |
| Adobe shockwave player | = 8.0.196a | No fix listed |
| Adobe shockwave player | = 8.0.204 | No fix listed |
| Adobe shockwave player | = 8.0.205 | No fix listed |
| Adobe shockwave player | = 8.5.1 | No fix listed |
| Adobe shockwave player | = 8.5.1.100 | No fix listed |
| Adobe shockwave player | = 8.5.1.103 | No fix listed |
| Adobe shockwave player | = 8.5.1.105 | No fix listed |
| Adobe shockwave player | = 8.5.1.106 | No fix listed |
| Adobe shockwave player | = 8.5.321 | No fix listed |
| Adobe shockwave player | = 8.5.323 | No fix listed |
| Adobe shockwave player | = 8.5.324 | No fix listed |
| Adobe shockwave player | = 8.5.325 | No fix listed |
| Adobe shockwave player | = 9 | No fix listed |
| Adobe shockwave player | = 9.0.383 | No fix listed |
| Adobe shockwave player | = 9.0.432 | No fix listed |
| Adobe shockwave player | = 10.0.0.210 | No fix listed |
Show 15 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe shockwave player | = 10.0.1.004 | No fix listed |
| Adobe shockwave player | = 10.1.0.11 | No fix listed |
| Adobe shockwave player | = 10.1.0.011 | No fix listed |
| Adobe shockwave player | = 10.1.1.016 | No fix listed |
| Adobe shockwave player | = 10.1.4.020 | No fix listed |
| Adobe shockwave player | = 10.2.0.021 | No fix listed |
| Adobe shockwave player | = 10.2.0.022 | No fix listed |
| Adobe shockwave player | = 10.2.0.023 | No fix listed |
| Adobe shockwave player | = 11.0.0.456 | No fix listed |
| Adobe shockwave player | = 11.0.3.471 | No fix listed |
| Adobe shockwave player | = 11.5.0.595 | No fix listed |
| Adobe shockwave player | = 11.5.0.596 | No fix listed |
| Adobe shockwave player | = 11.5.1.601 | No fix listed |
| Adobe shockwave player | = 11.5.2.602 | No fix listed |
| Adobe shockwave player | = 11.5.6.606 | No fix listed |
References
- dvlabs.tippingpoint.com
- www.adobe.com patch vendor-advisory
- 20100824 TPTI-10-14: Adobe Shockwave Director rcsL Chunk Pointer Offset Remote Code Execution Vulnerability mailing-list
- 1024361 vdb-entry
- ADV-2010-2176 vdb-entry
- oval:org.mitre.oval:def:12021 signature vdb-entry