Unscored severity · published Jan 5, 2004
CVE-2003-1017
Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows…
–
CVSS
3.5%
EPSS
No
On KEV
Description
Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
Director · Macromedia
5.0 · source: NVD
FP
Flash Player · Macromedia
4.0_r12; 5.0; 5.0_r50; 6.0; 6.0.29.0; 6.0.40.0; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-1017
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-1017
Patch
http://www.macromedia.com/devnet/security/security_zone/mpsb03-08.html
Exploit
http://www.securityfocus.com/bid/8900
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/14013