CVE-2010-2866

Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a count value associated with an "undocumented structure" and the tSAC chunk in a Director movie.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

13.01% chance of exploitation in the next 30 days, 96th percentile

Published

2010-08-26

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/15076

References

• CVE Record
• NVD entry

Related

• CVE-2010-2862
• CVE-2010-2883
• CVE-2010-2861
• CVE-2010-2891
• CVE-2010-2860
• CVE-2010-2892