CVE-2010-4195

Severity Score

9.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The TextXtra module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.

El módulo TextXtra en Adobe Shockwave Player anterior a v11.5.9.620 no valida correctamente la entrada de datos no especificados, que permite a los atacantes ejecutar código de su elección a través de vectores desconocidos.

*Credits: N/A

CVSS Scores

NISTv2 9.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2010-11-05 CVE Reserved
2011-02-10 CVE Published
2023-03-07 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-20: Improper Input Validation

CAPEC

References (5)

URL	Tag	Source
http://www.kb.cert.org/vuls/id/189929	Third Party Advisory
http://www.securityfocus.com/bid/46336	Vdb Entry
http://www.securitytracker.com/id?1025056	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://www.adobe.com/support/security/bulletins/apsb11-01.html	2011-02-17

URL	Date	SRC
http://www.vupen.com/english/advisories/2011/0335	2011-02-17

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				<= 11.5.9.615 Search vendor "Adobe" for product "Shockwave Player" and version " <= 11.5.9.615"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				1.0 Search vendor "Adobe" for product "Shockwave Player" and version "1.0"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				2.0 Search vendor "Adobe" for product "Shockwave Player" and version "2.0"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				3.0 Search vendor "Adobe" for product "Shockwave Player" and version "3.0"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				4.0 Search vendor "Adobe" for product "Shockwave Player" and version "4.0"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				5.0 Search vendor "Adobe" for product "Shockwave Player" and version "5.0"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				6.0 Search vendor "Adobe" for product "Shockwave Player" and version "6.0"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				8.0 Search vendor "Adobe" for product "Shockwave Player" and version "8.0"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				8.0.196 Search vendor "Adobe" for product "Shockwave Player" and version "8.0.196"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				8.0.196a Search vendor "Adobe" for product "Shockwave Player" and version "8.0.196a"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				8.0.204 Search vendor "Adobe" for product "Shockwave Player" and version "8.0.204"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				8.0.205 Search vendor "Adobe" for product "Shockwave Player" and version "8.0.205"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				8.5.1 Search vendor "Adobe" for product "Shockwave Player" and version "8.5.1"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				8.5.1.100 Search vendor "Adobe" for product "Shockwave Player" and version "8.5.1.100"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				8.5.1.103 Search vendor "Adobe" for product "Shockwave Player" and version "8.5.1.103"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				8.5.1.105 Search vendor "Adobe" for product "Shockwave Player" and version "8.5.1.105"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				8.5.1.106 Search vendor "Adobe" for product "Shockwave Player" and version "8.5.1.106"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				8.5.321 Search vendor "Adobe" for product "Shockwave Player" and version "8.5.321"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				8.5.323 Search vendor "Adobe" for product "Shockwave Player" and version "8.5.323"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				8.5.324 Search vendor "Adobe" for product "Shockwave Player" and version "8.5.324"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				8.5.325 Search vendor "Adobe" for product "Shockwave Player" and version "8.5.325"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				9 Search vendor "Adobe" for product "Shockwave Player" and version "9"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				9.0.383 Search vendor "Adobe" for product "Shockwave Player" and version "9.0.383"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				9.0.432 Search vendor "Adobe" for product "Shockwave Player" and version "9.0.432"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				10.0.0.210 Search vendor "Adobe" for product "Shockwave Player" and version "10.0.0.210"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				10.0.1.004 Search vendor "Adobe" for product "Shockwave Player" and version "10.0.1.004"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				10.1.0.11 Search vendor "Adobe" for product "Shockwave Player" and version "10.1.0.11"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				10.1.0.011 Search vendor "Adobe" for product "Shockwave Player" and version "10.1.0.011"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				10.1.1.016 Search vendor "Adobe" for product "Shockwave Player" and version "10.1.1.016"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				10.1.4.020 Search vendor "Adobe" for product "Shockwave Player" and version "10.1.4.020"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				10.2.0.021 Search vendor "Adobe" for product "Shockwave Player" and version "10.2.0.021"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				10.2.0.022 Search vendor "Adobe" for product "Shockwave Player" and version "10.2.0.022"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				10.2.0.023 Search vendor "Adobe" for product "Shockwave Player" and version "10.2.0.023"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				11.0.0.456 Search vendor "Adobe" for product "Shockwave Player" and version "11.0.0.456"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				11.0.3.471 Search vendor "Adobe" for product "Shockwave Player" and version "11.0.3.471"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				11.5.0.595 Search vendor "Adobe" for product "Shockwave Player" and version "11.5.0.595"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				11.5.0.596 Search vendor "Adobe" for product "Shockwave Player" and version "11.5.0.596"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				11.5.1.601 Search vendor "Adobe" for product "Shockwave Player" and version "11.5.1.601"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				11.5.2.602 Search vendor "Adobe" for product "Shockwave Player" and version "11.5.2.602"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				11.5.6.606 Search vendor "Adobe" for product "Shockwave Player" and version "11.5.6.606"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				11.5.7.609 Search vendor "Adobe" for product "Shockwave Player" and version "11.5.7.609"		-		Affected
Adobe Search vendor "Adobe"		Shockwave Player Search vendor "Adobe" for product "Shockwave Player"				11.5.8.612 Search vendor "Adobe" for product "Shockwave Player" and version "11.5.8.612"		-		Affected