CVE-2010-2873

CVE-2010-2873 describes a critical vulnerability in Adobe Shockwave Player versions prior to 11.5.8.612, affecting its handling of .DIR and .DCR Director movies. The flaw stems from improper validation of offset values within rcsL RIFF chunks, allowing remote attackers to trigger heap memory corruption. This can lead to a denial of service or, more critically, arbitrary code execution, as indicated by its CVSS score of 9.3 (Critical). Despite its high severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.