Unscored CVE-2010-4088 EUVD-2010-4064GHSA-pj49-56rq-x2cw

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corr…

Published Oct 29, 2010 · Updated Aug 7, 2024 · Assigned by adobe

Description

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a .dir file with "duplicated references to the same KEY* chunk," a different vulnerability than CVE-2010-2581, CVE-2010-4084, CVE-2010-4085, and CVE-2010-4086.

References

1024664 vdb-entry
http://www.adobe.com/support/security/bulletins/apsb10-25.html
oval:org.mitre.oval:def:12169 vdb-entry signature
20101030 Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4088 mailing-list