Lucene search
HistoryJan 05, 2004 - 5:00 a.m.
CVE-2003-1017
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.006
Percentile
78.9%
Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.
Affected configurations
Node
macromediadirectorMatch5.0
ORmacromediaflash_playerMatch4.0_r12
ORmacromediaflash_playerMatch5.0
ORmacromediaflash_playerMatch5.0_r50
ORmacromediaflash_playerMatch6.0
ORmacromediaflash_playerMatch6.0.29.0
ORmacromediaflash_playerMatch6.0.40.0
ORmacromediaflash_playerMatch6.0.47.0
ORmacromediaflash_playerMatch6.0.65.0
ORmacromediaflash_playerMatch6.0.79.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| macromedia | director | 5.0 | cpe:2.3:a:macromedia:director:5.0:*:*:*:*:*:*:* |
| macromedia | flash_player | 4.0_r12 | cpe:2.3:a:macromedia:flash_player:4.0_r12:*:*:*:*:*:*:* |
| macromedia | flash_player | 5.0 | cpe:2.3:a:macromedia:flash_player:5.0:*:*:*:*:*:*:* |
| macromedia | flash_player | 5.0_r50 | cpe:2.3:a:macromedia:flash_player:5.0_r50:*:*:*:*:*:*:* |
| macromedia | flash_player | 6.0 | cpe:2.3:a:macromedia:flash_player:6.0:*:*:*:*:*:*:* |
| macromedia | flash_player | 6.0.29.0 | cpe:2.3:a:macromedia:flash_player:6.0.29.0:*:*:*:*:*:*:* |
| macromedia | flash_player | 6.0.40.0 | cpe:2.3:a:macromedia:flash_player:6.0.40.0:*:*:*:*:*:*:* |
| macromedia | flash_player | 6.0.47.0 | cpe:2.3:a:macromedia:flash_player:6.0.47.0:*:*:*:*:*:*:* |
| macromedia | flash_player | 6.0.65.0 | cpe:2.3:a:macromedia:flash_player:6.0.65.0:*:*:*:*:*:*:* |
| macromedia | flash_player | 6.0.79.0 | cpe:2.3:a:macromedia:flash_player:6.0.79.0:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2003-1017
2004-01-05 05:00:00
nessus
nessus
Flash Player < 7.0.19.0 Predictable Data Location Weakness
2003-12-17 00:00:00
cvelist
cvelist
CVE-2003-1017
2003-12-17 05:00:00
exploitdb
exploitdb
Macromedia Flash Player 6.0.x - Flash Cookie Predictable File Location
2003-10-24 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.006
Percentile
78.9%
Related for NVD:CVE-2003-1017