CVE-2003-1017

Опубликовано: 05 янв. 2004

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.

Ссылки

http://www.macromedia.com/devnet/security/security_zone/mpsb03-08.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/8900
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/14013
http://www.macromedia.com/devnet/security/security_zone/mpsb03-08.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/8900
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/14013

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:macromedia:director:5.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:4.0_r12:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:5.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:5.0_r50:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:6.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:6.0.29.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:6.0.40.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:6.0.47.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:6.0.65.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:6.0.79.0:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.03002

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2003-1017

debian

больше 22 лет назад

Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a ...

GHSA-mgw8-f263-mhhf

github

больше 4 лет назад