macromedia shockwave flash plugin vulnerabilities

Latest macromedia shockwave flash plugin CVEs

Newest publication first

1. CVE-1999-1526 Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia.

   Published 2001-09-12

   Medium·CVSS 5.0 EPSS 1.1%

   Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia.

2. CVE-1999-1525 Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie.

   Published 2001-09-12

   Medium·CVSS 5.1 EPSS 1.2%

   Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie.

3. CVE-2001-0166 Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malformed tag length specifiers in a SWF file.

   Published 2001-05-07

   High·CVSS 7.6 EPSS 1.7%

   Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malformed tag length specifiers in a SWF file.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.