Unscored severity · published Dec 23, 2002
CVE-2002-1382
Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash file format (SWF) files, a…
–
CVSS
2.8%
EPSS
No
On KEV
Description
Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash file format (SWF) files, a different issue than CAN-2002-0846.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FP
Flash Player · Macromedia
4.0_r12; 5.0; 5.0_r50; 6.0; 6.0.29.0; 6.0.40.0; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1382
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1382
marc.info
http://marc.info/?l=bugtraq&m=104014220727109&w=2
marc.info
http://marc.info/?l=vulnwatch&m=104013370116670
Vendor Advisory
http://www.macromedia.com/v1/handlers/index.cfm?ID=23569
www.securityfocus.com
http://www.securityfocus.com/bid/6383
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/10861
More from Flash Player
–
CVE-2010-3654
Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or…
–
CVE-2010-2189
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when used in conjunction with VMWare Tools on a VMWare platform, allows attackers…
–
CVE-2010-2188
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly…
–
CVE-2010-2187
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly…
–
CVE-2010-2186
Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service…