Shockwave Flash Plugin Security Vulnerabilities

CVE-1999-1526

Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia.

CVE-2001-0166

Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malformed tag length specifiers in a SWF file.