CVE-2002-1467

Опубликовано: 22 апр. 2003

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via (1) an HTTP redirect, (2) a "file://" base in a web document, or (3) a relative URL from a web archive (mht file).

Ссылки

http://online.securityfocus.com/archive/1/286625
Exploit
Patch
Vendor Advisory
http://www.iss.net/security_center/static/9797.php
Patch
Vendor Advisory
http://www.macromedia.com/v1/handlers/index.cfm?ID=23294
http://www.securityfocus.com/bid/5429
Patch
Vendor Advisory
http://online.securityfocus.com/archive/1/286625
Exploit
Patch
Vendor Advisory
http://www.iss.net/security_center/static/9797.php
Patch
Vendor Advisory
http://www.macromedia.com/v1/handlers/index.cfm?ID=23294
http://www.securityfocus.com/bid/5429
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:macromedia:flash_player:6.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:6.0.29.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:6.0.40.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:shockwave:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00488

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2002-1467

redhat

около 23 лет назад

CVE-2002-1467

debian

больше 22 лет назад

Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to byp ...

GHSA-r825-m227-647m

github

больше 3 лет назад

EPSS

Процентиль: 64%

0.00488

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other