CVE-2010-1281 - iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file

Back Back to CVE browser

HIGH

iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file

Published May 13, 2010

8.8

HIGH

CVSS 3.1

EPSS 7.48%

Description

iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (7)

http://secunia.com/advisories/38751
third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
http://www.adobe.com/support/security/bulletins/apsb10-12.html
x_refsource_CONFIRMPatchVendor Advisory
http://www.securityfocus.com/archive/1/511252/100/0/threaded
mailing-listx_refsource_BUGTRAQBroken LinkVDB Entry
http://www.vupen.com/english/advisories/2010/1128
vdb-entryx_refsource_VUPENBroken LinkVendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-10-087/
x_refsource_MISCThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1310
Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7268
vdb-entrysignaturex_refsource_OVALBroken LinkTool Signature

Link	Providers	Tags
http://secunia.com/advisories/38751		third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
http://www.adobe.com/support/security/bulletins/apsb10-12.html		x_refsource_CONFIRMPatchVendor Advisory
http://www.securityfocus.com/archive/1/511252/100/0/threaded		mailing-listx_refsource_BUGTRAQBroken LinkVDB Entry
http://www.vupen.com/english/advisories/2010/1128		vdb-entryx_refsource_VUPENBroken LinkVendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-10-087/		x_refsource_MISCThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1310		Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7268		vdb-entrysignaturex_refsource_OVALBroken LinkTool Signature