Buffer overflow in Adobe Shockwave Player

CVE-2010-2870

DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly validate a certain chunk size in the mmap chunk in a Director movie, which allows remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted movie.

Vulnerability class: Buffer Overflow

EPSS: 0.048 (91.0th percentile) — read the EPSS interpretation.