CVE-2003-1017

Опубликовано: 05 янв. 2004

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.

Ссылки

http://www.macromedia.com/devnet/security/security_zone/mpsb03-08.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/8900
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/14013
http://www.macromedia.com/devnet/security/security_zone/mpsb03-08.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/8900
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/14013

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:macromedia:director:5.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:4.0_r12:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:5.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:5.0_r50:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:6.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:6.0.29.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:6.0.40.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:6.0.47.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:6.0.65.0:*:*:*:*:*:*:*

cpe:2.3:a:macromedia:flash_player:6.0.79.0:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.11638

Средний

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2003-1017

debian

почти 22 года назад

Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a ...

GHSA-mgw8-f263-mhhf

github

больше 3 лет назад