medium5.0Public exploit code
CVE-2003-1017
Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Ope…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Macromedia Flash Player 6.0.x - Flash Cookie Predictable File Location2003-10-24 · remote · windows · Verified
Impact
Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Macromedia | Director | Version 5.0 |
| Macromedia | Flash Player | Versions 4.0_r12, 5.0, 5.0_r50, 6.0, 6.0.29.0, 6.0.40.0 |
References
- NVD record
- CVE.org record
- http://www.macromedia.com/devnet/security/security_zone/mpsb03-08.html
- http://www.securityfocus.com/bid/8900
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14013
- http://www.macromedia.com/devnet/security/security_zone/mpsb03-08.html
- http://www.securityfocus.com/bid/8900
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14013