Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-2866. PoCs published by Abysssec.
AI-analyzed exploit summary This exploit generates a malicious .DIR file and an HTML file to trigger a memory corruption vulnerability in Adobe Shockwave Director via a crafted tSAC chunk. The PoC writes a corrupted .DIR file and an HTML file to exploit CVE-2010-2866.
Description
Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a count value associated with an "undocumented structure" and the tSAC chunk in a Director movie.
Exploits (1)
This exploit generates a malicious .DIR file and an HTML file to trigger a memory corruption vulnerability in Adobe Shockwave Director via a crafted tSAC chunk. The PoC writes a corrupted .DIR file and an HTML file to exploit CVE-2010-2866.