CVE-2002-0846 The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more data than the specified length.
HighCVSS 7.5
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more data than the specified length.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macromedia shockwave flash | All versions | No fix listed |
References
- 20020830 RE: Macromedia Shockwave Flash Malformed Header Overflow mailing-list
- flash-swf-header-bo(9798) vdb-entry
- www.macromedia.com vendor-advisory
- RHSA-2003:026 vendor-advisory
- RHSA-2003:027 vendor-advisory
- 5430 vdb-entry