NetSight
IP …
critical9.3Public exploit code

CVE-2010-2866

Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service (memory corrupti…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a count value associated with an "undocumented structure" and the tSAC chunk in a Director movie.

Affected products

VendorProductAffected versions
AdobeShockwave Player
through 11.5.7.609
Versions 1.0, 2.0, 3.0, 4.0, 5.0

Weakness classification

CWE-189

References