CVE-2010-0987

HIGH 8.8CVE-2010-0987 · Published 13/05/2010 · updated 16/06/2026

Package	Affected versions	Patched versions
shockwave player adobe	`< 11.5.7.609`	`11.5.7.609`

Description

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via crafted embedded fonts in a Shockwave file.

References

secunia.com/advisories/38751 · Not Applicable
secunia.com/secunia_research/2010-50 · Not Applicable
adobe.com/support/security/bulletins/apsb10-12.html · Patch
securityfocus.com/archive/1/511265/100/0/threaded · Third Party Advisory
securityfocus.com/bid/40093 · Third Party Advisory
vupen.com/english/advisories/2010/1128 · Permissions Required
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7052 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free