CVE-2003-1017
Summary
| CVE | CVE-2003-1017 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2004-01-05 05:00:00 UTC |
| Updated | 2017-07-11 01:29:00 UTC |
| Description | Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Macromedia | Director | 5.0 | All | All | All |
| Application | Macromedia | Director | 5.0 | All | All | All |
| Application | Macromedia | Flash Player | 4.0_r12 | All | All | All |
| Application | Macromedia | Flash Player | 5.0 | All | All | All |
| Application | Macromedia | Flash Player | 5.0_r50 | All | All | All |
| Application | Macromedia | Flash Player | 6.0 | All | All | All |
| Application | Macromedia | Flash Player | 6.0.29.0 | All | All | All |
| Application | Macromedia | Flash Player | 6.0.40.0 | All | All | All |
| Application | Macromedia | Flash Player | 6.0.47.0 | All | All | All |
| Application | Macromedia | Flash Player | 6.0.65.0 | All | All | All |
| Application | Macromedia | Flash Player | 6.0.79.0 | All | All | All |
| Application | Macromedia | Flash Player | 4.0_r12 | All | All | All |
| Application | Macromedia | Flash Player | 5.0 | All | All | All |
| Application | Macromedia | Flash Player | 5.0_r50 | All | All | All |
| Application | Macromedia | Flash Player | 6.0 | All | All | All |
| Application | Macromedia | Flash Player | 6.0.29.0 | All | All | All |
| Application | Macromedia | Flash Player | 6.0.40.0 | All | All | All |
| Application | Macromedia | Flash Player | 6.0.47.0 | All | All | All |
| Application | Macromedia | Flash Player | 6.0.65.0 | All | All | All |
| Application | Macromedia | Flash Player | 6.0.79.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Macromedia - MPSB03-08 Update to Flash Player Addressing Local Shared Object Security | CONFIRM | www.macromedia.com | Patch, Vendor Advisory |
| Macromedia Flash Player Flash Cookie Predictable File Location Weakness | BID | www.securityfocus.com | Exploit, Patch, Vendor Advisory |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.