Macromedia Flash ActiveX Control Bandwidth Consumption Vulnerability

Bugtraq ID:	4567
Class:	Design Error
CVE:	CVE-2002-1625
Remote:	Yes
Local:	No
Published:	Apr 19 2002 12:00AM
Updated:	Jul 11 2009 12:46PM
Credit:	Published in a Macromedia bulletin.
Vulnerable:	Macromedia Flash 6.0 + Microsoft Internet Explorer 5.0.1 SP2 + Microsoft Internet Explorer 5.0.1 SP2 + Microsoft Internet Explorer 5.0.1 SP1 + Microsoft Internet Explorer 5.0.1 SP1 + Microsoft Internet Explorer 5.0.1 + Microsoft Internet Explorer 5.0.1 + Microsoft Internet Explorer 6.0 + Microsoft Internet Explorer 6.0 + Microsoft Internet Explorer 5.5 SP2 + Microsoft Internet Explorer 5.5 SP2 + Microsoft Internet Explorer 5.5 SP1 + Microsoft Internet Explorer 5.5 SP1 + Microsoft Internet Explorer 5.5 preview + Microsoft Internet Explorer 5.5 preview + Microsoft Internet Explorer 5.5 + Microsoft Internet Explorer 5.5 + Microsoft Internet Explorer 5.0 + Microsoft Internet Explorer 5.0 + Microsoft Windows XP Embedded SP3 + Microsoft Windows XP Embedded SP2 + Microsoft Windows XP Home SP3 + Microsoft Windows XP Home SP2 + Microsoft Windows XP Media Center Edition SP3 + Microsoft Windows XP Media Center Edition SP2 + Microsoft Windows XP Professional SP3 + Microsoft Windows XP Professional SP2 + Microsoft Windows XP Professional x64 Edition SP2 + Microsoft Windows XP Tablet PC Edition SP3 + Microsoft Windows XP Tablet PC Edition SP2 + Netscape Communicator 6.1 + Netscape Communicator 6.1 + Netscape Communicator 4.78 + Netscape Communicator 4.78 + Netscape Communicator 4.77 + Netscape Communicator 4.77 + Netscape Communicator 4.76 + Netscape Communicator 4.76 + Netscape Communicator 4.75 + Netscape Communicator 4.75 + Netscape Communicator 4.74 + Netscape Communicator 4.74 + Netscape Communicator 4.73 + Netscape Communicator 4.73 + Netscape Communicator 4.72 + Netscape Communicator 4.72 + Netscape Communicator 4.61 + Netscape Communicator 4.61 + Netscape Communicator 4.51 + Netscape Communicator 4.51 + Netscape Communicator 4.7 + Netscape Communicator 4.7 + Netscape Communicator 4.6 + Netscape Communicator 4.6 + Redhat netscape-common-4.76-11.i386.rpm + Redhat netscape-common-4.78-2.i386.rpm + Redhat netscape-common-4.79-1.i386.rpm + Redhat netscape-communicator-4.76-11.i386.rpm + Redhat netscape-communicator-4.78-2.i386.rpm + Redhat netscape-communicator-4.79-1.i386.rpm + Redhat netscape-navigator-4.76-11.i386.rpm + Redhat netscape-navigator-4.78-2.i386.rpm + Redhat netscape-navigator-4.79-1.i386.rpm
Not Vulnerable:

Macromedia Flash ActiveX Control Bandwidth Consumption Vulnerability

No exploit is required.

Macromedia Flash ActiveX Control Bandwidth Consumption Vulnerability

Solution:
Macromedia has announced that a patch will be available within approximately 7 - 10 days of their initial announcement.

Macromedia Flash ActiveX Control Bandwidth Consumption Vulnerability

References:

• Macromedia Flash Player 6 Streaming Issue (Macromedia)