CVE:CVE-2008-1834
CNNVD:CNNVD-200804-240
0.6.4以前的Swfdec中的swfdec_load_object.c并不会很好地限制不可靠sandboxes访问本地文件，远程攻击者通过一个精心设计的Flash文件来读取任意文件。
solution:Upgrade swfdec swfdec to a higher version than 0.6.2,0.4.0,0.4.1,0.4.2,0.4.3,0.4.4,0.4.5,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.5.90,0.6.0,and avoid the version (,0.6.2],0.4.0,0.4.1,0.4.2,0.4.3,0.4.4,0.4.5,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.5.90,0.6.0