CVE-2002-1467 Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via (1) an HTTP redirect, (2) a "file://" base in a web document, or (3)....
MediumCVSS 5.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via (1) an HTTP redirect, (2) a "file://" base in a web document, or (3) a relative URL from a web archive (mht file).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macromedia flash player | = 6.0 | No fix listed |
| macromedia flash player | = 6.0.29.0 | No fix listed |
| macromedia flash player | = 6.0.40.0 | No fix listed |
| macromedia shockwave | = 8.0 | No fix listed |
References
- 20020808 Macromedia Flash plugin can read local files exploit mailing-list patch vendor-advisory
- flash-same-domain-disclosure(9797) patch vdb-entry vendor-advisory
- www.macromedia.com
- 5429 patch vdb-entry vendor-advisory