Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie that contains an Xtra URL, as demonstrated by a URL for an outdated Xtra.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: certcc

Published: 2012-12-20T11:00:00

Updated: 2024-08-06T21:28:39.380Z

Reserved: 2012-12-06T00:00:00

Link: CVE-2012-6271

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-12-20T12:02:20.013

Modified: 2017-11-17T02:29:00.363

Link: CVE-2012-6271

cve-icon Redhat

No data.