oss-security - CVE request: Swfdec <0.6.4 remote file disclosure

Date: Fri, 11 Apr 2008 03:02:55 +0200
From: Robert Buchholz <rbu@...too.org>
To: oss-security@...ts.openwall.com
Subject: CVE request: Swfdec <0.6.4 remote file disclosure

Swfdec before 0.6.4 allowed flash movies to read arbitrary local files.

References:
http://lists.freedesktop.org/archives/swfdec/2008-April/001321.html
http://gitweb.freedesktop.org/?p=swfdec/swfdec.git;a=commit;h=326ee4ff631ecc11605f1251e1923a94561a3823

Download attachment "signature.asc " of type "application/pgp-signature" (190 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.