CVE-2012-6271

Published: Dec 20, 2012Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie that contains an Xtra URL, as demonstrated by a URL for an outdated Xtra.

Affected (51)

Products: Adobe: Shockwave Player

Adobe

1 product

Shockwave Player

Configuration A

51 vulnerable

Vulnerable Software	Affected Versions
Adobe Shockwave Player	Up to 11.6.8.638
Adobe Shockwave Player	Version 1.0
Adobe Shockwave Player	Version 10.0.0.210
Adobe Shockwave Player	Version 10.0.1.004
Adobe Shockwave Player	Version 10.1.0.011
Adobe Shockwave Player	Version 10.1.0.11
Adobe Shockwave Player	Version 10.1.1.016
Adobe Shockwave Player	Version 10.1.4.020
Adobe Shockwave Player	Version 10.2.0.021
Adobe Shockwave Player	Version 10.2.0.022
Adobe Shockwave Player	Version 10.2.0.023
Adobe Shockwave Player	Version 11.0.0.456
Adobe Shockwave Player	Version 11.0.3.471
Adobe Shockwave Player	Version 11.5.0.595
Adobe Shockwave Player	Version 11.5.0.596
Adobe Shockwave Player	Version 11.5.1.601
Adobe Shockwave Player	Version 11.5.10.620
Adobe Shockwave Player	Version 11.5.2.602
Adobe Shockwave Player	Version 11.5.6.606
Adobe Shockwave Player	Version 11.5.7.609
Adobe Shockwave Player	Version 11.5.8.612
Adobe Shockwave Player	Version 11.5.9.615
Adobe Shockwave Player	Version 11.5.9.620
Adobe Shockwave Player	Version 11.6.0.626
Adobe Shockwave Player	Version 11.6.1.629
Adobe Shockwave Player	Version 11.6.3.633
Adobe Shockwave Player	Version 11.6.4.634
Adobe Shockwave Player	Version 11.6.5.635
Adobe Shockwave Player	Version 11.6.6.636
Adobe Shockwave Player	Version 11.6.7.637
Adobe Shockwave Player	Version 2.0
Adobe Shockwave Player	Version 3.0
Adobe Shockwave Player	Version 4.0
Adobe Shockwave Player	Version 5.0
Adobe Shockwave Player	Version 6.0
Adobe Shockwave Player	Version 8.0.196
Adobe Shockwave Player	Version 8.0.196a
Adobe Shockwave Player	Version 8.0.204
Adobe Shockwave Player	Version 8.0.205
Adobe Shockwave Player	Version 8.0
Adobe Shockwave Player	Version 8.5.1.100
Adobe Shockwave Player	Version 8.5.1.103
Adobe Shockwave Player	Version 8.5.1.105
Adobe Shockwave Player	Version 8.5.1.106
Adobe Shockwave Player	Version 8.5.1
Adobe Shockwave Player	Version 8.5.321
Adobe Shockwave Player	Version 8.5.323
Adobe Shockwave Player	Version 8.5.324
Adobe Shockwave Player	Version 8.5.325
Adobe Shockwave Player	Version 9.0.383
Adobe Shockwave Player	Version 9.0.432

References (4)

http://www.kb.cert.org/vuls/id/323161

Source: cret@cert.org

http://www.kb.cert.org/vuls/id/519137

Source: cret@cert.org

US Government Resource

http://www.kb.cert.org/vuls/id/323161

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/519137

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.