Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

Swfdec Untrusted Sandbox Remote Information Disclosure Vulnerability

Swfdec is prone to a remote information-disclosure vulnerability because the software fails to securely implement restricted sandboxes for Macromedia Flash animation files.

Successful exploits allow remote attackers to access the contents of arbitrary files located on computers running the affected software. Information harvested may aid in further attacks.

Versions prior to Swfdec 0.6.4 are vulnerable to this issue.







 

Privacy Statement
Copyright 2008, SecurityFocus