Vulnerability CVE-2010-2874 - CERT Civis.Net

Vulnerability Name:

CVE-2010-2874 (CCN-61360)

Assigned:

2010-08-24

Published:

2010-08-24

Updated:

2017-09-19

Summary:

Unspecified vulnerability in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to execute arbitrary code via unknown vectors that trigger memory corruption.
Note: due to conflicting information and use of the same CVE identifier by the vendor, ZDI, and TippingPoint, it is not clear whether this issue is related to use of an uninitialized pointer, an incorrect pointer offset calculation, or both.

CVSS v3 Severity:

10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

9.3 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2010-2874

Source: CCN
Type: TPTI-10-11
Adobe Shockwave tSAC Chunk Pointer Offset Memory Corruption Remote Code Execution Vulnerability

Source: CCN
Type: SA41065
Adobe Shockwave Player Multiple Vulnerabilities

Source: CCN
Type: SECTRACK ID: 1024361
Adobe Shockwave Player Has Multiple Flaws That Let Remote Users Execute Arbitrary Code or Deny Service

Source: CCN
Type: Adobe Product Security Bulletin APSB10-20
Security update available for Shockwave Player

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb10-20.html

Source: CCN
Type: OSVDB ID: 67432
Adobe Shockwave Player DIRAPIX.dll Director Movie tSAC Chunk Offset Handling Remote Code Execution

Source: SECTRACK
Type: UNKNOWN
1024361

Source: VUPEN
Type: Vendor Advisory
ADV-2010-2176

Source: XF
Type: UNKNOWN
shockwave-tsac-chunk-code-exec(61360)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:11924

Source: CCN
Type: ZDI-10-163
Adobe Shockwave Director tSAC Chunk Parsing Remote Code Execution Vulnerability

Vulnerable Configuration:

Configuration 1:

cpe:/a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:8.0.196:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:8.0.196a:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:8.0.204:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:8.0.205:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:8.5.1.100:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:8.5.1.103:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:8.5.1.105:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:8.5.1.106:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:8.5.321:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:8.5.323:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:8.5.324:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:8.5.325:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:9:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:9.0.383:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:9.0.432:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:10.0.0.210:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:10.0.1.004:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:10.1.0.011:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:10.1.1.016:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:10.1.4.020:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:10.2.0.021:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:10.2.0.022:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:10.2.0.023:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:11.0.0.456:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:11.0.3.471:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:11.5.0.596:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:11.5.1.601:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:11.5.2.602:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:11.5.6.606:*:*:*:*:*:*:*

OR cpe:/a:adobe:shockwave_player:*:*:*:*:*:*:*:* (Version <= 11.5.7.609)

Configuration CCN 1:

cpe:/a:adobe:shockwave_player:11.5.7.609:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.mitre.oval:def:11924	V	Adobe Shockwave Player Memory Corruption Vulnerability	2014-11-10