CVE-2010-0127: High severity Adobe Shockwave Player vulnerability
Published May 13, 2010
·Updated
Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted FFFFFF45h Shockwave 3D blocks in a Shockwave file.
Affected Software
6 affected components
Adobe Shockwave Player<11.5.7.609
macOS
Microsoft Windows
All of the following
Adobe Shockwave Player<11.5.7.609
Any of the following
macOS
Microsoft Windows
Remediation
Event History
May 13, 2010
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
05:30 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via NVD·05:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
May 24, 58294
Event
07:06 PM
Frequently Asked Questions
1
What is the severity of CVE-2010-0127?
CVE-2010-0127 has a critical severity as it allows remote attackers to execute arbitrary code or cause a denial of service.
2
Which versions of Adobe Shockwave Player are affected by CVE-2010-0127?
Adobe Shockwave Player versions before 11.5.7.609 are affected by CVE-2010-0127.
3
How do I fix CVE-2010-0127?
To fix CVE-2010-0127, upgrade Adobe Shockwave Player to version 11.5.7.609 or later.
4
What type of attacks does CVE-2010-0127 enable?
CVE-2010-0127 enables remote code execution and denial of service attacks via crafted Shockwave files.
5
Can macOS or Windows systems be affected by CVE-2010-0127?
Yes, macOS and Windows systems using an affected version of Adobe Shockwave Player can be vulnerable to CVE-2010-0127.