PT-2003-2008 · Opera+2 · Opera+2

Published 2003-12-17 · Updated 2017-07-11 · CVE-2003-1017

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Macromedia Flash Player versions prior to 7.0.19.0

Description The issue allows remote attackers to read restricted files by exploiting vulnerabilities in web browsers, taking advantage of the predictable location where Flash data files are stored. This can be leveraged by attackers whose exploits rely on predictable names, potentially affecting users of web browsers such as Internet Explorer and Opera.

Recommendations For Macromedia Flash Player versions prior to 7.0.19.0, update to version 7.0.19.0 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2003-1017

Affected Products

Internet Explorer

Macromedia Flash Player

Opera

References · 5

• 🔥 https://exploit-db.com/exploits/23298 · Exploit
• 🔥 http://securityfocus.com/bid/8900 · Exploit
• http://macromedia.com/devnet/security/security_zone/mpsb03-08.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-1017 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14013 · Note