← Database

CVE-2010-2582

CRITICAL CVSS: 9.3 Published: 2010-10-29 Modified: 2026-06-16

Description

An unspecified function in TextXtra.x32 in Adobe Shockwave Player before 11.5.9.615 does not properly reallocate a buffer when processing a DEMX chunk in a Director file, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code.

Affected Platforms

Adobe Shockwave Player

Weakness Type

CWE-119

References