CVE-2010-1291

CRITICAL 9.3CVE-2010-1291 · Published 13/05/2010 · updated 16/06/2026

In short

CVE-2010-1291 is a CRITICAL (CVSS 9.3) vulnerability affecting shockwave player (adobe).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
shockwave player adobe	`= 1.0= 10.1.0.11= 11.0.0.456= 11.5.0.595= 11.5.0.596= 11.5.1.601= 11.5.2.602= 2.0= 3.0= 4.0= 5.0= 6.0= 8.0= 8.5.1= 9≤ 11.5.6.606`	No fix yet

Description

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, and CVE-2010-1290.

References

secunia.com/advisories/38751 · Vendor Advisory
adobe.com/support/security/bulletins/apsb10-12.html · Patch
vupen.com/english/advisories/2010/1128 · Patch
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7183 · Third Party Advisory

More vulnerabilities in shockwave player

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

shockwave player

adobe

= 1.0= 10.1.0.11= 11.0.0.456= 11.5.0.595= 11.5.0.596= 11.5.1.601= 11.5.2.602= 2.0= 3.0= 4.0= 5.0= 6.0= 8.0= 8.5.1= 9≤ 11.5.6.606

No fix yet

More vulnerabilities in shockwave player

See all →