CVE-2010-0987: Buffer Overflow
Published May 13, 2010
·Updated
Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via crafted embedded fonts in a Shockwave file.
Affected Software
6 affected components
Adobe Shockwave Player<11.5.7.609
macOS
Microsoft Windows
All of the following
Adobe Shockwave Player<11.5.7.609
Any of the following
macOS
Microsoft Windows
Remediation
Event History
May 13, 2010
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
05:30 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via NVD·05:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
May 25, 58294
Event
02:19 AM
Frequently Asked Questions
1
What is the severity of CVE-2010-0987?
CVE-2010-0987 is classified as a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2010-0987?
To fix CVE-2010-0987, upgrade Adobe Shockwave Player to version 11.5.7.609 or later.
3
What causes CVE-2010-0987?
CVE-2010-0987 is caused by a heap-based buffer overflow that occurs when handling crafted embedded fonts in a Shockwave file.
4
Who is affected by CVE-2010-0987?
Users of Adobe Shockwave Player versions prior to 11.5.7.609 are affected by CVE-2010-0987.
5
What type of attacks can exploit CVE-2010-0987?
CVE-2010-0987 can be exploited by remote attackers to execute arbitrary code on the vulnerable system.