CVE-2010-0129: Integer Overflow
Published May 13, 2010
·Updated
Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir (aka Director) file that triggers an array index error.
Affected Software
6 affected components
Adobe Shockwave Player<11.5.7.609
macOS
Microsoft Windows
All of the following
Adobe Shockwave Player<11.5.7.609
Any of the following
macOS
Microsoft Windows
Remediation
Event History
May 13, 2010
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
05:30 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via NVD·05:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
May 23, 58294
Event
09:38 PM
Frequently Asked Questions
1
What is the severity of CVE-2010-0129?
CVE-2010-0129 is rated as critical due to the potential for remote code execution and denial of service.
2
How do I fix CVE-2010-0129?
To fix CVE-2010-0129, update Adobe Shockwave Player to version 11.5.7.609 or later.
3
What types of attacks can exploit CVE-2010-0129?
CVE-2010-0129 can be exploited through crafted .dir files that trigger integer overflows.
4
Which versions of Adobe Shockwave Player are affected by CVE-2010-0129?
Adobe Shockwave Player versions before 11.5.7.609 are affected by CVE-2010-0129.
5
What are the potential consequences of exploiting CVE-2010-0129?
Exploitation of CVE-2010-0129 can lead to memory corruption, possible execution of arbitrary code, and denial of service.