Buffer overflow in Adobe Director
CVE-2010-0128
Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director before 11.5.7.609 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir file that triggers an invalid read operation.
Vulnerability class: Buffer Overflow
EPSS: 0.050 (91.3th percentile) — read the EPSS interpretation.
Affected products
- Adobe Director
- Adobe Shockwave_player
- Apple Macos
- Microsoft Windows
- N/a — versions n/a
Weakness classification (CWE)
References
- PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, Broken Link, third-party-advisory, Vendor Advisory)
- PSIRT-CNA@flexerasoftware.com (x_refsource_MISC, Broken Link)
- PSIRT-CNA@flexerasoftware.com (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Broken Link)
- PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- PSIRT-CNA@flexerasoftware.com (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Broken Link)
- PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_VUPEN, Broken Link, Vendor Advisory)
- PSIRT-CNA@flexerasoftware.com (x_refsource_MISC, Broken Link, Vendor Advisory)
- PSIRT-CNA@flexerasoftware.com (Tool Signature, signature, x_refsource_OVAL, vdb-entry)