Vulnerability in Adobe Shockwave Player

CVE-2010-2589

Integer overflow in the dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspecified vectors.

EPSS: 0.048 (91.1th percentile) — read the EPSS interpretation.

Affected products

Adobe Shockwave_player — versions 1.0, 2.0, 3.0
N/a — versions n/a

Weakness classification (CWE)

CWE-189

References

PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_XF)
PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_BID)
PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_SECTRACK)