PT-2002-2603 · Macromedia · Macromedia Flash Player

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1881

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Macromedia Flash Player versions 4.0 r12 through 6.0.47.0

Description The issue allows remote attackers to cause a denial of service, resulting in a web browser crash, via malformed content in a Flash Shockwave (.SWF) file. This can be achieved by modifying the file, such as ROT13 encoding the body of the file but not the headers.

Recommendations For Macromedia Flash Player versions 4.0 r12 through 6.0.47.0, consider avoiding the use of malformed Flash Shockwave (.SWF) files to minimize the risk of exploitation. As a temporary workaround, restrict access to potentially malicious .SWF files until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2002-1881

Produtos afetados

Macromedia Flash Player

Referências · 4

• 🔥 http://securityfocus.com/bid/5445 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-08/0088.html · Exploit
• http://iss.net/security_center/static/9843.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1881 · Nota de Segurança