PT-2002-2350 · Macromedia · Macromedia Flash Player

Published 2002-12-31 · Updated 2017-07-11 · CVE-2002-1625

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Macromedia Flash Player version 6

Description The issue allows remote attackers to cause a denial of service by consuming bandwidth, resources, and CPU. This is achieved via the loadMovie or loadSound commands, which continue to execute until the browser is closed.

Recommendations For Macromedia Flash Player version 6, consider disabling the loadMovie and loadSound commands as a temporary workaround to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-1625

Affected Products

Macromedia Flash Player

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1625 · Security Note
• http://kb.cert.org/vuls/id/128491 · Patch
• http://securityfocus.com/bid/4567 · Note
• http://macromedia.com/v1/handlers/index.cfm?ID=22796&Method=Full&Title=Macromedia%20Flash%20Player%206%20Streaming%20Issue&Cache=False · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8925 · Note