The host is installed with Adobe Shockwave Player 11.6.8.638 or earlier and is prone to a downgrading attack vulnerability. A flaw is present in the application, which fails to handle a crafted HTML document that references Shockwave content with a certain compatibility parameter. Successful exploitation could allow remote attackers to trigger installation of a Shockwave Player 10.4.0.025 compatib ...