PT-2002-2350 · Macromedia · Macromedia Flash Player

Publicado 2002-12-31 · Atualizado 2017-07-11 · CVE-2002-1625

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Macromedia Flash Player version 6

Description The issue allows remote attackers to cause a denial of service by consuming bandwidth, resources, and CPU. This is achieved via the loadMovie or loadSound commands, which continue to execute until the browser is closed.

Recommendations For Macromedia Flash Player version 6, consider disabling the loadMovie and loadSound commands as a temporary workaround to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-1625

Produtos afetados

Macromedia Flash Player

Referências · 5

• http://securityfocus.com/bid/4567 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1625 · Nota de Segurança
• http://kb.cert.org/vuls/id/128491 · Correção
• http://macromedia.com/v1/handlers/index.cfm?ID=22796&Method=Full&Title=Macromedia%20Flash%20Player%206%20Streaming%20Issue&Cache=False · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8925 · Nota