CVE-2003-1017 Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read...
MediumCVSS 5.0
EPSS 3.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macromedia director | = 5.0 | No fix listed |
| macromedia flash player | = 4.0_r12 | No fix listed |
| macromedia flash player | = 5.0 | No fix listed |
| macromedia flash player | = 5.0_r50 | No fix listed |
| macromedia flash player | = 6.0 | No fix listed |
| macromedia flash player | = 6.0.29.0 | No fix listed |
| macromedia flash player | = 6.0.40.0 | No fix listed |
| macromedia flash player | = 6.0.47.0 | No fix listed |
| macromedia flash player | = 6.0.65.0 | No fix listed |
| macromedia flash player | = 6.0.79.0 | No fix listed |
References
- www.macromedia.com patch vendor-advisory
- 8900 exploit patch vdb-entry vendor-advisory
- flash-file-predictable-location(14013) vdb-entry