FLASH: security problem with Shockwave?...

[Michael J. Buchholz \"Buck\]

Group,


Someone just forwarded this on to me the other day, is there any truth to it

and, if so, does it effect FLASH?


--------------------------------

Date Reported: 1999-03-11

Vulnerability: shockwave-updater

Platforms Affected: Shockwave Plugin 7

Risk Factor: High

A vulnerability has been discovered in the auto-update feature of the

Shockwave 7 plugin. When the plug-in contacts the Macromedia web site for

updates, it transfers sensitive information about the sites that it has

visited, and in some cases includes passwords used to enter that site.

-----------------------------------


Michael J. Buchholz "Buck"

Internet Consultant, MCP

Ford Motor Company

555 Republic Drive, Suite 425

Allen Park, MI 48101

p:313.390.7477  e:

mbuchho1ford [dot] com

------------------------------------------------------------------------

To UNSUBSCRIBE send: unsubscribe flasher in the body of an

email to

list-managershocker [dot] com

.  Problems to:

ownershocker [dot] com

N.B. Email address must be the same as the one you used to subscribe.

For info on digest mode send: info flasher to

list-managershocker [dot] com