CVE-2010-4195

The TextXtra module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.

Score

CVSS 2.0 9.3 Critical

Status

Modified - psirt@adobe.com

Published

2011-02-10

Last modified

2024-08-07

Weaknesses

CWE-20

Affected products

• Shockwave Player (Adobe)

References

• http://www.adobe.com/support/security/bulletins/apsb11-01.html
• http://www.kb.cert.org/vuls/id/189929
• http://www.securityfocus.com/bid/46336
• http://www.securitytracker.com/id?1025056
• http://www.vupen.com/english/advisories/2011/0335