CVE-2010-4195

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

The TextXtra module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.adobe.com/support/security/bulletins/apsb11-01.htmlPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/189929US Government Resource
http://www.securityfocus.com/bid/46336
http://www.securitytracker.com/id?1025056
http://www.vupen.com/english/advisories/2011/0335Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb11-01.htmlPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/189929US Government Resource
http://www.securityfocus.com/bid/46336
http://www.securitytracker.com/id?1025056
http://www.vupen.com/english/advisories/2011/0335Vendor Advisory

Timeline

Published: Feb 10, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-41969.3The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows at CVE-2010-41979.8Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remot CVE-2010-41988.8WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, w CVE-2010-41998.8Google Chrome before 7.0.517.44 does not properly perform a cast of an unspecified variable during processing of an SVG use element, which a CVE-2010-42019.8Use-after-free vulnerability in Google Chrome before 7.0.517.44 allows remote attackers to cause a denial of service or possibly have unspec CVE-2010-42029.8Multiple integer overflows in Google Chrome before 7.0.517.44 on Linux allow remote attackers to cause a denial of service or possibly have CVE-2010-42039.8WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of s CVE-2010-42049.8WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, accesses a frame object after this object ha CVE-2010-42059.8Google Chrome before 7.0.517.44 does not properly handle the data types of event objects, which allows remote attackers to cause a denial of CVE-2010-42068.8Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before CVE-2010-42074.3Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and CVE-2010-42084.3Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and