CVE-2010-0128: Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director befor...

Security readout for executives and security teams

This flaw affects older Adobe Shockwave Player and Adobe Director versions. A malicious Director file could corrupt memory when opened or rendered, causing a crash and possibly code execution. Business risk is concentrated in environments that still allow Shockwave/Director content or retain legacy runtime or authoring software. Exposure is likely limited to legacy endpoints with Adobe Shockwave Player or Adobe Director versions older than 11.5.7.609, especially where .dir files or Shockwave content can be opened from email, web, shares, or archives. Prioritize remediation if legacy Adobe Shockwave or Director remains in the environment. The issue is old and not KEV-listed, but possible code execution from crafted content makes unmanaged legacy installations a meaningful endpoint risk. Mitigation focus: Update Shockwave Player and Adobe Director to 11.5.7.609 or later where still present.; Remove Shockwave Player and Director from systems that no longer require them.; Block or quarantine untrusted .dir files at email and web gateways..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.