Lucene search
CertccCVE-2012-6270HistoryDec 20, 2012 - 12:02 p.m.
CVE-2012-6270
2012-12-2012:02:19
certcc
web.nvd.nist.gov
28
cve-2012-6270
adobe shockwave player
remote attackers
installation trigger
compatibility feature
crafted html document
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0.004
Percentile
75.0%
Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of a Shockwave Player 10.4.0.025 compatibility feature via a crafted HTML document that references Shockwave content with a certain compatibility parameter, related to a “downgrading” attack.
Affected configurations
Node
adobeshockwave_playerRange≤11.6.8.638
ORadobeshockwave_playerMatch1.0
ORadobeshockwave_playerMatch2.0
ORadobeshockwave_playerMatch3.0
ORadobeshockwave_playerMatch4.0
ORadobeshockwave_playerMatch5.0
ORadobeshockwave_playerMatch6.0
ORadobeshockwave_playerMatch8.0
ORadobeshockwave_playerMatch8.0.196
ORadobeshockwave_playerMatch8.0.196a
ORadobeshockwave_playerMatch8.0.204
ORadobeshockwave_playerMatch8.0.205
ORadobeshockwave_playerMatch8.5.1
ORadobeshockwave_playerMatch8.5.1.100
ORadobeshockwave_playerMatch8.5.1.103
ORadobeshockwave_playerMatch8.5.1.105
ORadobeshockwave_playerMatch8.5.1.106
ORadobeshockwave_playerMatch8.5.321
ORadobeshockwave_playerMatch8.5.323
ORadobeshockwave_playerMatch8.5.324
ORadobeshockwave_playerMatch8.5.325
ORadobeshockwave_playerMatch9.0.383
ORadobeshockwave_playerMatch9.0.432
ORadobeshockwave_playerMatch10.0.0.210
ORadobeshockwave_playerMatch10.0.1.004
ORadobeshockwave_playerMatch10.1.0.11
ORadobeshockwave_playerMatch10.1.0.011
ORadobeshockwave_playerMatch10.1.1.016
ORadobeshockwave_playerMatch10.1.4.020
ORadobeshockwave_playerMatch10.2.0.021
ORadobeshockwave_playerMatch10.2.0.022
ORadobeshockwave_playerMatch10.2.0.023
ORadobeshockwave_playerMatch11.0.0.456
ORadobeshockwave_playerMatch11.0.3.471
ORadobeshockwave_playerMatch11.5.0.595
ORadobeshockwave_playerMatch11.5.0.596
ORadobeshockwave_playerMatch11.5.1.601
ORadobeshockwave_playerMatch11.5.2.602
ORadobeshockwave_playerMatch11.5.6.606
ORadobeshockwave_playerMatch11.5.7.609
ORadobeshockwave_playerMatch11.5.8.612
ORadobeshockwave_playerMatch11.5.9.615
ORadobeshockwave_playerMatch11.5.9.620
ORadobeshockwave_playerMatch11.5.10.620
ORadobeshockwave_playerMatch11.6.0.626
ORadobeshockwave_playerMatch11.6.1.629
ORadobeshockwave_playerMatch11.6.3.633
ORadobeshockwave_playerMatch11.6.4.634
ORadobeshockwave_playerMatch11.6.5.635
ORadobeshockwave_playerMatch11.6.6.636
ORadobeshockwave_playerMatch11.6.7.637
| Vendor | Product | Version | CPE |
|---|---|---|---|
| adobe | shockwave_player | 11.0.3.471 | cpe:/a:adobe:shockwave_player:11.0.3.471::: |
| adobe | shockwave_player | 4.0 | cpe:/a:adobe:shockwave_player:4.0::: |
| adobe | shockwave_player | 8.0.196a | cpe:/a:adobe:shockwave_player:8.0.196a::: |
| adobe | shockwave_player | 11.6.7.637 | cpe:/a:adobe:shockwave_player:11.6.7.637::: |
| adobe | shockwave_player | 8.5.321 | cpe:/a:adobe:shockwave_player:8.5.321::: |
| adobe | shockwave_player | 11.5.0.595 | cpe:/a:adobe:shockwave_player:11.5.0.595::: |
| adobe | shockwave_player | 11.6.4.634 | cpe:/a:adobe:shockwave_player:11.6.4.634::: |
| adobe | shockwave_player | 10.2.0.023 | cpe:/a:adobe:shockwave_player:10.2.0.023::: |
| adobe | shockwave_player | 9.0.383 | cpe:/a:adobe:shockwave_player:9.0.383::: |
| adobe | shockwave_player | 11.5.9.615 | cpe:/a:adobe:shockwave_player:11.5.9.615::: |
Related
cert
cert
Adobe Shockwave player vulnerable to downgrading
2012-12-17 00:00:00
nvd
nvd
CVE-2012-6270
2012-12-20 12:02:19
prion
prion
Design/Logic Flaw
2012-12-20 12:02:00
cvelist
cvelist
CVE-2012-6270
2012-12-20 11:00:00
openvas
openvas
Adobe Shockwave Player Multiple Vulnerabilities (Jan 2013) - Windows
2013-01-02 00:00:00
Adobe Shockwave Player Multiple Vulnerabilities Jan-2013 (Windows)
2013-01-02 00:00:00
Adobe Shockwave Player Multiple Vulnerabilities Jan-2013 (Mac OS X)
2013-01-02 00:00:00
nessus
nessus
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0.004
Percentile
75.0%
Related for CVE-2012-6270