CVE-2010-1283 describes a critical heap memory corruption vulnerability in Adobe Shockwave Player versions prior to 11.5.7.609. This flaw, affecting Adobe Shockwave Player on Windows and macOS, arises from improper parsing of 3D objects within .dir files, allowing remote attackers to execute arbitrary code or trigger a denial of service. With a CVSS score of 8.8 (High), this vulnerability is remotely exploitable with low attack complexity, requiring user interaction, and can lead to complete compromise of confidentiality, integrity, and availability. The EPSS score is low, indicating a low probability of exploitation in the wild. Despite its high severity, there is no evidence of active exploitation (not in KEV or Hot List), and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also notably absent.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 11.5.7.609CPE matchmatch criteria | cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.