Description
Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie.
References
- shockwave-internal-access(1585) vdb-entry
- shockwave-file-read-vuln(1586) vdb-entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/460 vdb-entry
- 19970314 Shockwave Security Alert mailing-list