First published: Thu May 13 2010(Updated: )
Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1287, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Shockwave Player | <=11.5.6.606 | |
Adobe Shockwave Player | =1.0 | |
Adobe Shockwave Player | =2.0 | |
Adobe Shockwave Player | =3.0 | |
Adobe Shockwave Player | =4.0 | |
Adobe Shockwave Player | =5.0 | |
Adobe Shockwave Player | =6.0 | |
Adobe Shockwave Player | =8.0 | |
Adobe Shockwave Player | =8.5.1 | |
Adobe Shockwave Player | =9 | |
Adobe Shockwave Player | =10.1.0.11 | |
Adobe Shockwave Player | =11.0.0.456 | |
Adobe Shockwave Player | =11.5.0.595 | |
Adobe Shockwave Player | =11.5.0.596 | |
Adobe Shockwave Player | =11.5.1.601 | |
Adobe Shockwave Player | =11.5.2.602 | |
Apple macOS | ||
Microsoft Windows | ||
Adobe Shockwave Player | ||
Microsoft Windows 7 | ||
Microsoft Windows Server 2003 | ||
Microsoft Windows Server 2008 Itanium | ||
Microsoft Windows Vista |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-1286 has a critical severity rating due to its potential for exploitation leading to denial of service or arbitrary code execution.
The recommended fix for CVE-2010-1286 is to update to Adobe Shockwave Player version 11.5.7.609 or later.
CVE-2010-1286 can be exploited to perform denial of service attacks or execute arbitrary code on the affected systems.
CVE-2010-1286 affects all versions of Adobe Shockwave Player prior to 11.5.7.609.
Currently, the best mitigation for CVE-2010-1286 is to discontinue use of the vulnerable versions until updates can be applied.