CVE-2010-2874: adobe shockwave_player Resource Management Errors
Vulnerability summary
CVE-2010-2874 is a high (CVSS 9.3) Resource Management Errors vulnerability in adobe shockwave_player. EPSS estimates a 4.44% chance of exploitation in the next 30 days, higher than 91.3% of scored vulnerabilities.
Timeline
- 07-09-2010PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to execute arbitrary code via unknown vectors that trigger memory corruption. NOTE: due to conflicting information and use of the same CVE identifier by the vendor, ZDI, and TippingPoint, it is not clear whether this issue is related to use of an uninitialized pointer, an incorrect pointer offset calculation, or both.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.44%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
0.00 pp
From 4.44% on 22-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Adobe1 product
- shockwave_player≤ 11.5.7.609 | 1.0 | 2.0 | 3.0 | 4.0 | 5.0 | 6.0 | 8.0 | 8.0.196 | 8.0.196a | 8.0.204 | 8.0.205 | 8.5.1 | 8.5.1.100 | 8.5.1.103 | 8.5.1.105 | 8.5.1.106 | 8.5.321 | 8.5.323 | 8.5.324 | 8.5.325 | 9 | 9.0.383 | 9.0.432 | 10.0.0.210 | 10.0.1.004 | 10.1.0.11 | 10.1.0.011 | 10.1.1.016 | 10.1.4.020 | 10.2.0.021 | 10.2.0.022 | 10.2.0.023 | 11.0.0.456 | 11.0.3.471 | 11.5.0.595 | 11.5.0.596 | 11.5.1.601 | 11.5.2.602 | 11.5.6.606
1 vendor · 1 product
References
4 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11924VDB EntrySignatureX Refsource OVAL