NetSight
IP …
critical9.3

CVE-2010-2582

An unspecified function in TextXtra.x32 in Adobe Shockwave Player before 11.5.9.615 does not properly reallocate a buffer when processing a DEMX chunk in a Dir…

Impact

An unspecified function in TextXtra.x32 in Adobe Shockwave Player before 11.5.9.615 does not properly reallocate a buffer when processing a DEMX chunk in a Director file, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code.

Affected products

VendorProductAffected versions
AdobeShockwave Player
through 11.5.8.612
Versions 1.0, 2.0, 3.0, 4.0, 5.0

Weakness classification

CWE-119

References