CVE-2010-3653
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote...
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in the wild in October 2010. NOTE: some of these details are obtained from third party information.
Exploit likelihood
What each source reports
NVD Score used
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in the wild in October 2010. NOTE: some of these details are obtained from third party information.
- Record
CVE-2010-3653- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in the wild in October 2010. NOTE: some of these details are obtained from third party information.
- Record
CVE-2010-3653- Updated
- 2026-11-02
EUVDEUVD-2010-3649 No score
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in the wild in October 2010. NOTE: some of these details are obtained from third party information.
- Record
EUVD-2010-3649- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xxv5-9hqx-8g9q No score
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote...
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in the wild in October 2010. NOTE: some of these details are obtained from third party information.
- Record
GHSA-xxv5-9hqx-8g9q- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Adobe Shockwave Player - 'rcsL chunk' Memory Corruption | 2010-10-21 |
| Exploit-DB | Adobe Shockwave Player - rcsL Memory Corruption (Metasploit) | 2010-10-22 |
| Metasploit | Adobe Shockwave rcsL Memory Corruption | 2010-10-21 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3653 is a high vulnerability (CVSS 9.3) in Adobe Shockwave Player, published October 26, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 74.6%, the 99th percentile. No source names a fixed version.
References
adobe.com/support/security/bulletins/apsb10-25.html
exchange.xforce.ibmcloud.com/vulnerabilities/62688
abysssec.com/blog/2010/10/adobe-shockwave-player-rcsl-chunk-memory-corruption-0day
exploit-db.com/exploits/15296
kb.cert.org/vuls/id/402231
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11285