CVE-2010-4086 dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Director (.dir) media file with an inva...
HighCVSS 9.3
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Director (.dir) media file with an invalid element size, a different vulnerability than CVE-2010-2581, CVE-2010-2880, CVE-2010-4084, CVE-2010-4085, and CVE-2010-4088.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe shockwave player | <= 11.5.8.612 | No fix listed |
| Adobe shockwave player | = 1.0 | No fix listed |
| Adobe shockwave player | = 2.0 | No fix listed |
| Adobe shockwave player | = 3.0 | No fix listed |
| Adobe shockwave player | = 4.0 | No fix listed |
| Adobe shockwave player | = 5.0 | No fix listed |
| Adobe shockwave player | = 6.0 | No fix listed |
| Adobe shockwave player | = 8.0 | No fix listed |
| Adobe shockwave player | = 8.0.196 | No fix listed |
| Adobe shockwave player | = 8.0.196a | No fix listed |
| Adobe shockwave player | = 8.0.204 | No fix listed |
| Adobe shockwave player | = 8.0.205 | No fix listed |
| Adobe shockwave player | = 8.5.1 | No fix listed |
| Adobe shockwave player | = 8.5.1.100 | No fix listed |
| Adobe shockwave player | = 8.5.1.103 | No fix listed |
| Adobe shockwave player | = 8.5.1.105 | No fix listed |
| Adobe shockwave player | = 8.5.1.106 | No fix listed |
| Adobe shockwave player | = 8.5.321 | No fix listed |
| Adobe shockwave player | = 8.5.323 | No fix listed |
| Adobe shockwave player | = 8.5.324 | No fix listed |
| Adobe shockwave player | = 8.5.325 | No fix listed |
| Adobe shockwave player | = 9 | No fix listed |
| Adobe shockwave player | = 9.0.383 | No fix listed |
| Adobe shockwave player | = 9.0.432 | No fix listed |
| Adobe shockwave player | = 10.0.0.210 | No fix listed |
Show 16 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe shockwave player | = 10.0.1.004 | No fix listed |
| Adobe shockwave player | = 10.1.0.11 | No fix listed |
| Adobe shockwave player | = 10.1.0.011 | No fix listed |
| Adobe shockwave player | = 10.1.1.016 | No fix listed |
| Adobe shockwave player | = 10.1.4.020 | No fix listed |
| Adobe shockwave player | = 10.2.0.021 | No fix listed |
| Adobe shockwave player | = 10.2.0.022 | No fix listed |
| Adobe shockwave player | = 10.2.0.023 | No fix listed |
| Adobe shockwave player | = 11.0.0.456 | No fix listed |
| Adobe shockwave player | = 11.0.3.471 | No fix listed |
| Adobe shockwave player | = 11.5.0.595 | No fix listed |
| Adobe shockwave player | = 11.5.0.596 | No fix listed |
| Adobe shockwave player | = 11.5.1.601 | No fix listed |
| Adobe shockwave player | = 11.5.2.602 | No fix listed |
| Adobe shockwave player | = 11.5.6.606 | No fix listed |
| Adobe shockwave player | = 11.5.7.609 | No fix listed |
References
- www.adobe.com patch vendor-advisory
- 20101030 Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4086 mailing-list
- 1024664 vdb-entry
- oval:org.mitre.oval:def:12030 signature vdb-entry