PT-2012-6257
CVE-2012-6271
·
Publicado
2012-12-20
·
Atualizado
2017-11-17
Descrição por
CVSS 2.0
9.3
AltaMétricasAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Adobe Shockwave Player versions prior to 11.6.8.638
Description
The issue allows remote attackers to trigger the installation of arbitrary signed Xtras via a Shockwave movie that contains an Xtra URL. This can be demonstrated by a URL for an outdated Xtra.
Recommendations
For Adobe Shockwave Player versions prior to 11.6.8.638, update to version 11.6.8.638 or later to resolve the issue.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾