PT-2002-2294 · Macromedia · Macromedia Flash Player

Published 2002-12-23 · Updated 2017-10-10 · CVE-2002-1382

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Macromedia Flash Player versions prior to 6.0.65.0

Description The issue allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash file format (SWF) files.

Recommendations For versions prior to 6.0.65.0, update to version 6.0.65.0 or later to resolve the issue.

Fix

Related Identifiers

CVE-2002-1382

Affected Products

Macromedia Flash Player

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2002-1382 · Security Note
• http://macromedia.com/v1/handlers/index.cfm?ID=23569 · Vendor Advisory
• http://marc.info/?l=vulnwatch&m=104013370116670 · Note
• http://securityfocus.com/bid/6383 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10861 · Note
• http://marc.info/?l=bugtraq&m=104014220727109&w=2 · Note