Improper input validation in Adobe Shockwave Player
CVE-2010-4196
The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.056 (92.0th percentile) — read the EPSS interpretation.
Affected products
- Adobe Shockwave_player — versions 1.0, 2.0, 3.0
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@adobe.com (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- psirt@adobe.com (vdb-entry, x_refsource_BID)
- psirt@adobe.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- psirt@adobe.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@adobe.com (vdb-entry, x_refsource_SECTRACK)