CVE-2002-1467

Опубликовано: 22 апр. 2003

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via (1) an HTTP redirect, (2) a "file://" base in a web document, or (3) a relative URL from a web archive (mht file).

Ссылки

http://online.securityfocus.com/archive/1/286625
Exploit
Patch
Vendor Advisory
http://www.iss.net/security_center/static/9797.php
Patch
Vendor Advisory
http://www.macromedia.com/v1/handlers/index.cfm?ID=23294
http://www.securityfocus.com/bid/5429
Patch
Vendor Advisory
http://online.securityfocus.com/archive/1/286625
Exploit
Patch
Vendor Advisory
http://www.iss.net/security_center/static/9797.php
Patch
Vendor Advisory
http://www.macromedia.com/v1/handlers/index.cfm?ID=23294
http://www.securityfocus.com/bid/5429
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:macromedia:flash_player:6.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:6.0.29.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:6.0.40.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:shockwave:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01007

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2002-1467

redhat

больше 23 лет назад

CVE-2002-1467

debian

почти 23 года назад

Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to byp ...

GHSA-r825-m227-647m

github

почти 4 года назад

EPSS

Процентиль: 77%

0.01007

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other