CVE-2010-4189
The IML32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute...
The IML32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie containing a GIF image with a crafted global color table size value, which causes an out-of-range pointer offset.
Exploit likelihood
What each source reports
NVD Score used
The IML32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie containing a GIF image with a crafted global color table size value, which causes an out-of-range pointer offset.
- Record
CVE-2010-4189- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The IML32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie containing a GIF image with a crafted global color table size value, which causes an out-of-range pointer offset.
- Record
CVE-2010-4189- Updated
- 2026-11-02
EUVDEUVD-2010-4163 No score
The IML32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie containing a GIF image with a crafted global color table size value, which causes an out-of-range pointer offset.
- Record
EUVD-2010-4163- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-frpw-365x-666v No score
The IML32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute...
The IML32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie containing a GIF image with a crafted global color table size value, which causes an out-of-range pointer offset.
- Record
GHSA-frpw-365x-666v- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4189 is a high vulnerability (CVSS 9.3) in Adobe Shockwave Player, published February 10, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.97%, the 90th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2011/0335
adobe.com/support/security/bulletins/apsb11-01.html
securitytracker.com/id?1025056
securityfocus.com/archive/1/516334/100/0/threaded
dvlabs.tippingpoint.com/advisory/TPTI-11-04
nvd.nist.gov/vuln/detail/CVE-2010-4189
github.com/advisories/GHSA-frpw-365x-666v