CVE-2010-2874
Estado: ModificadaAlta (9.3)—
Unspecified vulnerability in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to execute arbitrary code via unknown vectors that trigger memory corruption. NOTE: due to conflicting information and use of the same CVE identifier by the vendor, ZDI, and TippingPoint, it is not clear whether this issue is related to use of an uninitialized pointer, an incorrect pointer offset calculation, or both.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
- Puntuación base: 9.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 4.44%
- Percentil entre todas las CVEs puntuadas: 91
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-399
Referencias
- http://www.adobe.com/support/security/bulletins/apsb10-20.html
- http://www.securitytracker.com/id?1024361
- http://www.vupen.com/english/advisories/2010/2176
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11924
- http://www.adobe.com/support/security/bulletins/apsb10-20.html
- http://www.securitytracker.com/id?1024361
- http://www.vupen.com/english/advisories/2010/2176
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11924
JSON original (NVD)
Mostrar
{
"id": "CVE-2010-2874",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "psirt@adobe.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-09-07T18:00:02.247",
"references": [
{
"url": "http://www.adobe.com/support/security/bulletins/apsb10-20.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@adobe.com"
},
{
"url": "http://www.securitytracker.com/id?1024361",
"source": "psirt@adobe.com"
},
{
"url": "http://www.vupen.com/english/advisories/2010/2176",
"tags": [
"Vendor Advisory"
],
"source": "psirt@adobe.com"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11924",
"source": "psirt@adobe.com"
},
{
"url": "http://www.adobe.com/support/security/bulletins/apsb10-20.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1024361",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2010/2176",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11924",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-399"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to execute arbitrary code via unknown vectors that trigger memory corruption. NOTE: due to conflicting information and use of the same CVE identifier by the vendor, ZDI, and TippingPoint, it is not clear whether this issue is related to use of an uninitialized pointer, an incorrect pointer offset calculation, or both."
},
{
"lang": "es",
"value": "Vulnerabilidad sin especificar en Adobe Shockwave Player anterior a v11.5.8.612 permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos que desencadenan una corrupción de memoria. NOTA: debido al conflicto de información y uso del mismo identificador CVE por el fabricante, ZDI y TippingPoint, no está claro si este problema está relacionado con el uso de un puntero sin inicializar, un cálculo de desplazamiento de puntero incorrecto o ambos."
}
],
"lastModified": "2026-06-16T23:21:40.290",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B686A7C-8758-4F36-90DD-560B6A372576",
"versionEndIncluding": "11.5.7.609"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA5643BC-12F8-4F05-A363-9FC97EF1DD0F"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "085FA7DD-8048-4768-816C-82828022FCF3"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0DC258D-1C2B-4A7F-AD80-6C88A7A78A5D"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "966A8542-E5E1-468F-989E-47F71123A426"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DC1BCC0-B24B-4CFC-B3B9-FA3B0D968CC1"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFFDAAB3-CC22-4604-80B3-4A54CCEFD29E"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A77F1733-6755-44E7-8ECC-CFB397FC79A1"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:8.0.196:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9282EC1A-DFDB-49A9-8BE1-013D9B494D99"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:8.0.196a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4A8422D-39E4-490C-B3EC-FED7468D6B4D"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:8.0.204:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88A75AF4-F7BA-4CA4-8079-5D9794E1BD45"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:8.0.205:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "712325E1-B37A-4994-B42E-F02553A3CB9C"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC55CB2C-4DBC-4D16-96A7-FB3316A21D51"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:8.5.1.100:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FADB5808-5F9A-4FBD-A6FC-3DB17A6C6CF8"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:8.5.1.103:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFC415B5-F7C8-4277-A4A3-ECFA2CB38515"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:8.5.1.105:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3454FF46-3D72-4FF9-AF5B-2E948DA412D7"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:8.5.1.106:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E4726504-850B-4434-A149-09000D21F917"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:8.5.321:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6D89450-C92C-4541-917B-AD047803A2AC"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:8.5.323:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "798EB26B-14D6-4E90-AC84-FF47B89B82E7"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:8.5.324:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA562619-7FAA-4FA6-AE42-55801AF00D9C"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:8.5.325:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA961FB2-C543-4A1C-9C9E-C56641EB13FB"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17F5982F-35BD-49A0-9DBE-774816136D57"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:9.0.383:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56D23F59-4939-4ABE-A5BC-283BFC362E45"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:9.0.432:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE1DB962-10C6-4536-B693-4AF59F0C4D94"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:10.0.0.210:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA60B4FB-2BA4-4304-A7B8-8F0676C4F022"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:10.0.1.004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7D6B993-1CF8-4944-8456-B99A72F24814"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D18289BB-6568-4671-BC70-C8744DD2E0C6"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:10.1.0.011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD29AACC-E101-494B-BFD4-D97FDBE4A584"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:10.1.1.016:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F52120E-9CAB-40D9-A577-5D8278139F50"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:10.1.4.020:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AAB05A7D-3017-4589-AE5C-B1A377AF02B7"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:10.2.0.021:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "58C665F7-E05D-4A8C-B217-6689C95D3FF8"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:10.2.0.022:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8441B2BB-3837-4EDE-B44E-323B434CBF56"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:10.2.0.023:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2007F032-06BA-4347-9D9E-2C7C4C9BBCD0"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:11.0.0.456:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF19CBB1-F047-4472-A19D-48A147396383"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:11.0.3.471:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C51EB3CF-6770-4626-BDA7-9ED94A374911"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C61B9485-2A42-4C95-9A10-3F1102E4EBBD"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:11.5.0.596:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79FEEF7E-B477-485A-B9BC-98F6D1A2B10B"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:11.5.1.601:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E4FE4A01-9357-46D9-9BCB-DF2B4DECD9B3"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:11.5.2.602:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B9506D5-D8CA-4845-B2FA-0E47C9BB3C1A"
},
{
"criteria": "cpe:2.3:a:adobe:shockwave_player:11.5.6.606:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9FBAFFFF-D658-45F0-AF14-BA29AA2D5394"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@adobe.com"
}