Macromedia Flash Undocumented Action File Access Vulnerability
BID:4321
Info
Macromedia Flash Undocumented Action File Access Vulnerability
| Bugtraq ID: | 4321 |
| Class: | Design Error |
| CVE: |
CVE-2002-0477 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 20 2002 12:00AM |
| Updated: | Jul 11 2009 11:56AM |
| Credit: | Credited to Vengy <[email protected]> and published in a Macromedia Flash Support Center Technote. |
| Vulnerable: |
Macromedia Flash 5.0 |
| Not Vulnerable: | |
Discussion
Macromedia Flash Undocumented Action File Access Vulnerability
An issue has been reported in Flash, which could allow for a remote user to access known local files. The undocumented FSCommand 'exec' action, is used to execute external applications. In order to utilize this command the absolute path to the requested application must be argumented.
This issue is being exploited by a virus called SWF/LFM, please see reference section for more details on this malicious code.
An issue has been reported in Flash, which could allow for a remote user to access known local files. The undocumented FSCommand 'exec' action, is used to execute external applications. In order to utilize this command the absolute path to the requested application must be argumented.
This issue is being exploited by a virus called SWF/LFM, please see reference section for more details on this malicious code.
Exploit / POC
Macromedia Flash Undocumented Action File Access Vulnerability
This issue is being exploited by a virus called SWF/LFM, please see reference section for more details on this malicious code.
This issue is being exploited by a virus called SWF/LFM, please see reference section for more details on this malicious code.
References
Macromedia Flash Undocumented Action File Access Vulnerability
References:
References:
- BID 4320: Macromedia Flash Undocumented Command Arbitrary File Write Vulnerabili (SecurityFocus)
- Potential security issue with FSCommand "Save" (Macromedia)
- Potential security issue with the stand-alone Macromedia Flash Player 5 (Macromedia)
- Standalone Macromedia Flash Player Update for Windows (Macromedia)
- SWF.LFM.926 (F-Secure)
- SWF/LFM-926 (Sophos)