CVE-2010-2866

9.3
CVSS v2.0 Base Score
13.01%
LOW RiskEPSS (96th percentile)

Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a count value associated with an "undocumented structure" and the tSAC chunk in a Director movie.

Published: 8/26/2010
Modified: 6/16/2026
Back to CVE Lookup

Vulnerability Summary

CVSS v2 Score

9.3

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS Score (Exploitation Probability)

13.01%LOW Exploitation Risk
96th percentile

This vulnerability has a 13.01% probability of being exploited in the next 30 days, ranking higher than 96% of all scored CVEs.

CWE Classification

Advertisement