CVEvulnerability
CVE-2010-4196
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-02-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.
Affected configurations
• adobe shockwave player (<= 11.5.9.615)
• adobe shockwave player 1.0
• adobe shockwave player 2.0
• adobe shockwave player 3.0
• adobe shockwave player 4.0
• adobe shockwave player 5.0
• adobe shockwave player 6.0
• adobe shockwave player 8.0
• adobe shockwave player 8.0.196
• adobe shockwave player 8.0.196a
• adobe shockwave player 8.0.204
• adobe shockwave player 8.0.205
• adobe shockwave player 8.5.1
• adobe shockwave player 8.5.1.100
• adobe shockwave player 8.5.1.103
• adobe shockwave player 8.5.1.105
• adobe shockwave player 8.5.1.106
• adobe shockwave player 8.5.321
• adobe shockwave player 8.5.323
• adobe shockwave player 8.5.324
• adobe shockwave player 8.5.325
• adobe shockwave player 9
• adobe shockwave player 9.0.383
• adobe shockwave player 9.0.432
• adobe shockwave player 10.0.0.210
• adobe shockwave player 10.0.1.004
• adobe shockwave player 10.1.0.11
• adobe shockwave player 10.1.0.011
• adobe shockwave player 10.1.1.016
• adobe shockwave player 10.1.4.020
• adobe shockwave player 10.2.0.021
• adobe shockwave player 10.2.0.022
• adobe shockwave player 10.2.0.023
• adobe shockwave player 11.0.0.456
• adobe shockwave player 11.0.3.471
• adobe shockwave player 11.5.0.595
• adobe shockwave player 11.5.0.596
• adobe shockwave player 11.5.1.601
• adobe shockwave player 11.5.2.602
• adobe shockwave player 11.5.6.606
• adobe shockwave player 11.5.7.609
• adobe shockwave player 11.5.8.612
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.adobe.com/support/security/bulletins/apsb11-01.html Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/189929 US Government Resource
- http://www.securityfocus.com/bid/46338 www.securityfocus.com
- http://www.securitytracker.com/id?1025056 www.securitytracker.com
- http://www.vupen.com/english/advisories/2011/0335 Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb11-01.html Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/189929 US Government Resource
- http://www.securityfocus.com/bid/46338 www.securityfocus.com
- http://www.securitytracker.com/id?1025056 www.securitytracker.com
- http://www.vupen.com/english/advisories/2011/0335 Vendor Advisory