NetSight
critical9.3

CVE-2012-6271

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie that contains an Xtra…

Impact

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie that contains an Xtra URL, as demonstrated by a URL for an outdated Xtra.

Affected products

VendorProductAffected versions
AdobeShockwave Player
through 11.6.8.638
Versions 1.0, 2.0, 3.0, 4.0, 5.0

References