{"cvss":0.0,"datePublished":"2010-10-21T00:00:00Z","dateUpdated":"2010-10-21T00:00:00Z","description":"The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in the wild in October 2010. NOTE: some of these details are obtained from third party information.","dueDate":"","id":"CVE-2010-3653","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"shockwave_player","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Adobe shockwave_player Improper Restriction of Operations within the Bounds of a Memory Buffer","vendor":"Adobe"}