Lucene search
MitreCVE-2003-1017HistoryJan 05, 2004 - 5:00 a.m.
CVE-2003-1017
2004-01-0505:00:00
mitre
web.nvd.nist.gov
28
macromedia
flash player
data file
predictable location
web browsers
vulnerability
remote attackers
nvd
cve-2003-1017
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.006
Percentile
78.9%
Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.
Affected configurations
Node
macromediadirectorMatch5.0
ORmacromediaflash_playerMatch4.0_r12
ORmacromediaflash_playerMatch5.0
ORmacromediaflash_playerMatch5.0_r50
ORmacromediaflash_playerMatch6.0
ORmacromediaflash_playerMatch6.0.29.0
ORmacromediaflash_playerMatch6.0.40.0
ORmacromediaflash_playerMatch6.0.47.0
ORmacromediaflash_playerMatch6.0.65.0
ORmacromediaflash_playerMatch6.0.79.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| macromedia | director | 5.0 | cpe:2.3:a:macromedia:director:5.0:*:*:*:*:*:*:* |
| macromedia | flash_player | 4.0_r12 | cpe:2.3:a:macromedia:flash_player:4.0_r12:*:*:*:*:*:*:* |
| macromedia | flash_player | 5.0 | cpe:2.3:a:macromedia:flash_player:5.0:*:*:*:*:*:*:* |
| macromedia | flash_player | 5.0_r50 | cpe:2.3:a:macromedia:flash_player:5.0_r50:*:*:*:*:*:*:* |
| macromedia | flash_player | 6.0 | cpe:2.3:a:macromedia:flash_player:6.0:*:*:*:*:*:*:* |
| macromedia | flash_player | 6.0.29.0 | cpe:2.3:a:macromedia:flash_player:6.0.29.0:*:*:*:*:*:*:* |
| macromedia | flash_player | 6.0.40.0 | cpe:2.3:a:macromedia:flash_player:6.0.40.0:*:*:*:*:*:*:* |
| macromedia | flash_player | 6.0.47.0 | cpe:2.3:a:macromedia:flash_player:6.0.47.0:*:*:*:*:*:*:* |
| macromedia | flash_player | 6.0.65.0 | cpe:2.3:a:macromedia:flash_player:6.0.65.0:*:*:*:*:*:*:* |
| macromedia | flash_player | 6.0.79.0 | cpe:2.3:a:macromedia:flash_player:6.0.79.0:*:*:*:*:*:*:* |
Related
nessus
nessus
Flash Player < 7.0.19.0 Predictable Data Location Weakness
2003-12-17 00:00:00
cvelist
cvelist
CVE-2003-1017
2003-12-17 05:00:00
nvd
nvd
CVE-2003-1017
2004-01-05 05:00:00
exploitdb
exploitdb
Macromedia Flash Player 6.0.x - Flash Cookie Predictable File Location
2003-10-24 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.006
Percentile
78.9%
Related for CVE-2003-1017