CVE-2010-2589: Adobe Shockwave Player

High severity, CVSS 9.3. EPSS: 4.8% chance of exploitation in the next 30 days.

Integer overflow in the dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspecified vectors.

Affected products

• Adobe Shockwave Player: up to and including 11.5.9.615; version 1.0 only; version 2.0 only; version 3.0 only; version 4.0 only; version 5.0 only; …

Published 2011-02-10. Last modified 2026-06-16.