PT-2002-2603 · Macromedia · Macromedia Flash Player

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1881

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Macromedia Flash Player versions 4.0 r12 through 6.0.47.0

Description The issue allows remote attackers to cause a denial of service, resulting in a web browser crash, via malformed content in a Flash Shockwave (.SWF) file. This can be achieved by modifying the file, such as ROT13 encoding the body of the file but not the headers.

Recommendations For Macromedia Flash Player versions 4.0 r12 through 6.0.47.0, consider avoiding the use of malformed Flash Shockwave (.SWF) files to minimize the risk of exploitation. As a temporary workaround, restrict access to potentially malicious .SWF files until a fix is available.

Exploit

Fix

Related Identifiers

CVE-2002-1881

Affected Products

Macromedia Flash Player

References · 4

• 🔥 http://securityfocus.com/bid/5445 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-08/0088.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1881 · Security Note
• http://iss.net/security_center/static/9843.php · Note