CVE-2010-4196 The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.
HighCVSS 9.3
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe shockwave player | <= 11.5.9.615 | No fix listed |
| Adobe shockwave player | = 1.0 | No fix listed |
| Adobe shockwave player | = 2.0 | No fix listed |
| Adobe shockwave player | = 3.0 | No fix listed |
| Adobe shockwave player | = 4.0 | No fix listed |
| Adobe shockwave player | = 5.0 | No fix listed |
| Adobe shockwave player | = 6.0 | No fix listed |
| Adobe shockwave player | = 8.0 | No fix listed |
| Adobe shockwave player | = 8.0.196 | No fix listed |
| Adobe shockwave player | = 8.0.196a | No fix listed |
| Adobe shockwave player | = 8.0.204 | No fix listed |
| Adobe shockwave player | = 8.0.205 | No fix listed |
| Adobe shockwave player | = 8.5.1 | No fix listed |
| Adobe shockwave player | = 8.5.1.100 | No fix listed |
| Adobe shockwave player | = 8.5.1.103 | No fix listed |
| Adobe shockwave player | = 8.5.1.105 | No fix listed |
| Adobe shockwave player | = 8.5.1.106 | No fix listed |
| Adobe shockwave player | = 8.5.321 | No fix listed |
| Adobe shockwave player | = 8.5.323 | No fix listed |
| Adobe shockwave player | = 8.5.324 | No fix listed |
| Adobe shockwave player | = 8.5.325 | No fix listed |
| Adobe shockwave player | = 9 | No fix listed |
| Adobe shockwave player | = 9.0.383 | No fix listed |
| Adobe shockwave player | = 9.0.432 | No fix listed |
| Adobe shockwave player | = 10.0.0.210 | No fix listed |
Show 17 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe shockwave player | = 10.0.1.004 | No fix listed |
| Adobe shockwave player | = 10.1.0.11 | No fix listed |
| Adobe shockwave player | = 10.1.0.011 | No fix listed |
| Adobe shockwave player | = 10.1.1.016 | No fix listed |
| Adobe shockwave player | = 10.1.4.020 | No fix listed |
| Adobe shockwave player | = 10.2.0.021 | No fix listed |
| Adobe shockwave player | = 10.2.0.022 | No fix listed |
| Adobe shockwave player | = 10.2.0.023 | No fix listed |
| Adobe shockwave player | = 11.0.0.456 | No fix listed |
| Adobe shockwave player | = 11.0.3.471 | No fix listed |
| Adobe shockwave player | = 11.5.0.595 | No fix listed |
| Adobe shockwave player | = 11.5.0.596 | No fix listed |
| Adobe shockwave player | = 11.5.1.601 | No fix listed |
| Adobe shockwave player | = 11.5.2.602 | No fix listed |
| Adobe shockwave player | = 11.5.6.606 | No fix listed |
| Adobe shockwave player | = 11.5.7.609 | No fix listed |
| Adobe shockwave player | = 11.5.8.612 | No fix listed |
References
- www.adobe.com patch vendor-advisory
- VU#189929 third-party-advisory us-government-resource
- 46338 vdb-entry
- 1025056 vdb-entry
- ADV-2011-0335 vdb-entry vendor-advisory