Macromedia Shockwave GETNETTEXT Local File Disclosure Vulnerability
BID:6680
Info
Macromedia Shockwave GETNETTEXT Local File Disclosure Vulnerability
| Bugtraq ID: | 6680 |
| Class: | Design Error |
| CVE: |
CVE-1999-1525 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 14 1997 12:00AM |
| Updated: | Jul 11 2009 08:06PM |
| Credit: | Discovery of this vulnerability is creditied to David de Vitry. |
| Vulnerable: |
Macromedia Shockwave 5.0 Macromedia Shockwave 4.0 Macromedia Shockwave 3.0 Macromedia Shockwave 2.0 Macromedia Shockwave 1.0 |
| Not Vulnerable: |
Macromedia Shockwave 6.0 |
Discussion
Macromedia Shockwave GETNETTEXT Local File Disclosure Vulnerability
Macromedia Shockwave is multimedia playback application. It lets you view interactive Web content from your Web browser.
A problem has been reported with Macromedia Shockwave prior to version 6 that allows malicious webpage developers to create a Shockwave movie that will disclose the contents of a users email.
Macromedia Shockwave is multimedia playback application. It lets you view interactive Web content from your Web browser.
A problem has been reported with Macromedia Shockwave prior to version 6 that allows malicious webpage developers to create a Shockwave movie that will disclose the contents of a users email.
Exploit / POC
Macromedia Shockwave GETNETTEXT Local File Disclosure Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Macromedia Shockwave GETNETTEXT Local File Disclosure Vulnerability
References:
References:
- SHOCKWAVE SECURITY ALERT (David de Vitry)