PT-2012-6256
CVE-2012-6270
·
تاريخ النشر
2012-12-20
·
تاريخ التحديث
2017-11-17
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Adobe Shockwave Player versions prior to 11.6.8.638
Description
The issue allows remote attackers to trigger the installation of a compatibility feature for an older version of the software via a crafted HTML document. This is related to a "downgrading" attack, where a certain compatibility parameter is referenced in Shockwave content.
Recommendations
For Adobe Shockwave Player versions prior to 11.6.8.638, update to version 11.6.8.638 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾