CVE-2010-1287: Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption)...

Security readout for executives and security teams

CVE-2010-1287 affects Adobe Shockwave Player versions before 11.5.7.609. The reported issue is memory corruption that can crash the player and may allow arbitrary code execution. Business urgency depends on whether old Shockwave installations still exist in the environment. Exposure is likely limited to endpoints or managed images with Adobe Shockwave Player earlier than 11.5.7.609 installed or enabled. The provided affected-product metadata is incomplete, so asset inventory is required. Treat this as a legacy software cleanup and exposure-confirmation task. It is potentially serious because arbitrary code execution is possible, but urgency depends on whether vulnerable Shockwave versions remain deployed. Mitigation focus: Identify any Adobe Shockwave Player installations below 11.5.7.609.; Apply Adobe guidance from APSB10-12 where Shockwave must remain present.; Remove or disable obsolete Shockwave installations where business use is not required..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.