CVE-2010-4194: Adobe Shockwave Player

High severity, CVSS 9.3. EPSS: 5.6% chance of exploitation in the next 30 days.

The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.

Affected products

• Adobe Shockwave Player: up to and including 11.5.9.615; version 1.0 only; version 2.0 only; version 3.0 only; version 4.0 only; version 5.0 only; …

Published 2011-02-10. Last modified 2026-06-16.