CVE-2010-1292

Published May 13, 2010

Last updated 3 years ago

Overview

Description: The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file.
Source: psirt@adobe.com
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 9.3
Impact score: 10
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-119

Evaluator

Comment: -
Impact: -
Solution: -

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "568143B8-4800-4BCE-86DD-B9E410509C48",
            "versionEndIncluding": "11.5.6.606"
          },
          {
            "criteria": "cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BA5643BC-12F8-4F05-A363-9FC97EF1DD0F"
          },
          {
            "criteria": "cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "085FA7DD-8048-4768-816C-82828022FCF3"
          },
          {
            "criteria": "cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E0DC258D-1C2B-4A7F-AD80-6C88A7A78A5D"
          },
          {
            "criteria": "cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "966A8542-E5E1-468F-989E-47F71123A426"
          },
          {
            "criteria": "cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4DC1BCC0-B24B-4CFC-B3B9-FA3B0D968CC1"
          },
          {
            "criteria": "cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BFFDAAB3-CC22-4604-80B3-4A54CCEFD29E"
          },
          {
            "criteria": "cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A77F1733-6755-44E7-8ECC-CFB397FC79A1"
          },
          {
            "criteria": "cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AC55CB2C-4DBC-4D16-96A7-FB3316A21D51"
          },
          {
            "criteria": "cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "17F5982F-35BD-49A0-9DBE-774816136D57"
          },
          {
            "criteria": "cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D18289BB-6568-4671-BC70-C8744DD2E0C6"
          },
          {
            "criteria": "cpe:2.3:a:adobe:shockwave_player:11.0.0.456:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BF19CBB1-F047-4472-A19D-48A147396383"
          },
          {
            "criteria": "cpe:2.3:a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C61B9485-2A42-4C95-9A10-3F1102E4EBBD"
          },
          {
            "criteria": "cpe:2.3:a:adobe:shockwave_player:11.5.0.596:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "79FEEF7E-B477-485A-B9BC-98F6D1A2B10B"
          },
          {
            "criteria": "cpe:2.3:a:adobe:shockwave_player:11.5.1.601:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E4FE4A01-9357-46D9-9BCB-DF2B4DECD9B3"
          },
          {
            "criteria": "cpe:2.3:a:adobe:shockwave_player:11.5.2.602:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4B9506D5-D8CA-4845-B2FA-0E47C9BB3C1A"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "4C56F007-5F8E-4BDD-A803-C907BCC0AF55"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:adobe:shockwave_player:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "74A5F44B-F1F2-4D7F-9F6D-53AE0A192F0A"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "E33796DB-4523-4F04-B564-ADF030553D51"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "E3527F41-A6ED-437D-9833-458A2C60C2A3"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "32623D48-7000-4C7D-823F-7D2A9841D88C"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "7CAEEA81-5037-4B68-98D9-83AAEBC98E20"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Evaluator

Configurations

References