CVE-2010-4306
Last modified
CVE-2010-4306 is a vulnerability of currently unknown severity. Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, and CVE-2010-4192.. EPSS estimates a 3.78% chance of exploitation in the next 30 days.
Description
Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, and CVE-2010-4192.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Shockwave Player | <= 11.5.9.615 |
| Adobe | Shockwave Player | 1.0 |
| Adobe | Shockwave Player | 2.0 |
| Adobe | Shockwave Player | 3.0 |
| Adobe | Shockwave Player | 4.0 |
| Adobe | Shockwave Player | 5.0 |
| Adobe | Shockwave Player | 6.0 |
| Adobe | Shockwave Player | 8.0 |
| Adobe | Shockwave Player | 8.0.196 |
| Adobe | Shockwave Player | 8.0.196a |
| Adobe | Shockwave Player | 8.0.204 |
| Adobe | Shockwave Player | 8.0.205 |
| Adobe | Shockwave Player | 8.5.1 |
| Adobe | Shockwave Player | 8.5.1.100 |
| Adobe | Shockwave Player | 8.5.1.103 |
| Adobe | Shockwave Player | 8.5.1.105 |
| Adobe | Shockwave Player | 8.5.1.106 |
| Adobe | Shockwave Player | 8.5.321 |
| Adobe | Shockwave Player | 8.5.323 |
| Adobe | Shockwave Player | 8.5.324 |
| Adobe | Shockwave Player | 8.5.325 |
| Adobe | Shockwave Player | 9 |
| Adobe | Shockwave Player | 9.0.383 |
| Adobe | Shockwave Player | 9.0.432 |
| Adobe | Shockwave Player | 10.0.0.210 |
| Adobe | Shockwave Player | 10.0.1.004 |
| Adobe | Shockwave Player | 10.1.0.11 |
| Adobe | Shockwave Player | 10.1.0.011 |
| Adobe | Shockwave Player | 10.1.1.016 |
| Adobe | Shockwave Player | 10.1.4.020 |
| Adobe | Shockwave Player | 10.2.0.021 |
| Adobe | Shockwave Player | 10.2.0.022 |
| Adobe | Shockwave Player | 10.2.0.023 |
| Adobe | Shockwave Player | 11.0.0.456 |
| Adobe | Shockwave Player | 11.0.3.471 |
| Adobe | Shockwave Player | 11.5.0.595 |
| Adobe | Shockwave Player | 11.5.0.596 |
| Adobe | Shockwave Player | 11.5.1.601 |
| Adobe | Shockwave Player | 11.5.2.602 |
| Adobe | Shockwave Player | 11.5.6.606 |
| Adobe | Shockwave Player | 11.5.7.609 |
| Adobe | Shockwave Player | 11.5.8.612 |
References
- http://www.adobe.com/support/security/bulletins/apsb11-01.htmlPatch, Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0335Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb11-01.htmlPatch, Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0335Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-4306?
How severe is CVE-2010-4306?
How do I fix CVE-2010-4306?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-4300Heap-based buffer overflow in the dissect_ldss_transfer func…
- CVE-2010-4301epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissecto…
- CVE-2010-4302/opt/rv/Versions/CurrentVersion/Mcu/Config/Mcu.val in Cisco …
- CVE-2010-4303Cisco Unified Videoconferencing (UVC) System 5110 and 5115, …
- CVE-2010-4304The web interface in Cisco Unified Videoconferencing (UVC) S…
- CVE-2010-4305Cisco Unified Videoconferencing (UVC) System 3545, 5110, 511…
- CVE-2010-4307Buffer overflow in Adobe Shockwave Player before 11.5.9.620 …
- CVE-2010-4308Adobe Shockwave Player before 11.6.1.629 allows attackers to…
- CVE-2010-4309Adobe Shockwave Player before 11.6.1.629 allows attackers to…
- CVE-2010-4311Free Simple Software 1.0 stores passwords in cleartext, whic…
- CVE-2010-4312The default configuration of Apache Tomcat 6.x does not incl…
- CVE-2010-4313Unrestricted file upload vulnerability in fileman_file_uploa…
Are you affected by CVE-2010-4306?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
