CVE-2012-6271

4 documents4 sources
Severity
9.3CRITICAL
EPSS
1.0%
top 23.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Shockwave Player
Timeline
PublishedDec 20
Latest updateMay 17

Description

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie that contains an Xtra URL, as demonstrated by a URL for an outdated Xtra.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDadobe/shockwave_player11.6.8.638+50

🔴Vulnerability Details

2
GHSA
GHSA-c983-pjvv-rp77: Adobe Shockwave Player through 11↗2022-05-17
▶
CVEList
CVE-2012-6271: Adobe Shockwave Player through 11↗2012-12-20
▶