CVE-2006-6885
An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a...
An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long string in the swURL attribute.
Exploit likelihood
What each source reports
NVD Score used
An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long string in the swURL attribute.
- Record
CVE-2006-6885- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long string in the swURL attribute.
- Record
CVE-2006-6885- Updated
- 2026-11-02
EUVDEUVD-2006-6868 No score
An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long string in the swURL attribute.
- Record
EUVD-2006-6868- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cr72-p8f8-mx4g No score
An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a...
An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long string in the swURL attribute.
- Record
GHSA-cr72-p8f8-mx4g- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Macromedia Shockwave 10 'SwDir.dll' Internet Explorer 7 - Denial of Service | 2006-12-29 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6885 is a medium vulnerability (CVSS 4.3) in Macromedia Shockwave, published December 31, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.88%, the 94th percentile. No source names a fixed version.