CVE-2010-1281: High severity Adobe Shockwave Player vulnerability
Published May 13, 2010
·Updated
iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file.
Affected Software
6 affected components
Adobe Shockwave Player<11.5.7.609
macOS
Microsoft Windows
All of the following
Adobe Shockwave Player<11.5.7.609
Any of the following
macOS
Microsoft Windows
Remediation
Event History
May 13, 2010
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
05:30 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via NVD·05:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
May 22, 58294
Event
04:27 AM
Frequently Asked Questions
1
What is the severity of CVE-2010-1281?
CVE-2010-1281 has a high severity rating due to its ability to allow remote code execution.
2
How do I fix CVE-2010-1281?
To fix CVE-2010-1281, update Adobe Shockwave Player to version 11.5.7.609 or later.
3
Which versions of Adobe Shockwave Player are affected by CVE-2010-1281?
Adobe Shockwave Player versions prior to 11.5.7.609 are affected by CVE-2010-1281.
4
What type of attack does CVE-2010-1281 enable?
CVE-2010-1281 enables remote attackers to execute arbitrary code or cause a denial of service.
5
What specific file type is associated with CVE-2010-1281?
CVE-2010-1281 is associated with crafted .dir files.