CVE-1999-1525

Medium CVSS 5.1

Published 1997-03-14 · last changed 2026-06-16

The fix

We hold no Microsoft remediation data for CVE-1999-1525, which normally means it is not a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release, and the affected versions are listed below.

What it is

Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie.

Sources

NVD record for CVE-1999-1525

CVSS vector: AV:N/AC:H/Au:N/C:P/I:P/A:P