CVE-1999-1525

Medium

Published: 14/03/1997(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.16%

63th percentile - higher than 63% of all known CVEs

Summary

Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie.

Risk Assessment

This vulnerability may lead to privacy breaches for users and unauthorized access to internal organizational resources.

Recommendation

It is recommended to update Macromedia Shockwave to version 6.0 or later to mitigate this vulnerability.

Original NVD description (English source)

Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie.