CVE-2002-1382: High severity Macromedia Flash Player vulnerability

Published Dec 23, 2002

Updated

Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash file format (SWF) files, a different issue than CAN-2002-0846.

Affected Software

7 affected components

Macromedia Flash Player=5.0_r50

Macromedia Flash Player=5.0

Macromedia Flash Player=6.0.29.0

Macromedia Flash Player=6.0

Macromedia Flash Player=4.0_r12

Macromedia Flash Player=6.0.47.0

Macromedia Flash Player=6.0.40.0

Event History

Dec 23, 2002

CVE Published

05:00 AM

Sep 1, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1382?

CVE-2002-1382 is considered critical due to its potential to allow remote code execution.

How do I fix CVE-2002-1382?

To mitigate CVE-2002-1382, upgrade to Macromedia Flash Player version 6.0.65.0 or later.

What systems are affected by CVE-2002-1382?

CVE-2002-1382 affects various versions of Macromedia Flash Player, specifically versions 4.0_r12 through 6.0.47.0 and 6.0.29.0.

What are the risks associated with CVE-2002-1382?

The risks of CVE-2002-1382 include the potential for attackers to execute arbitrary code on vulnerable systems.

What is the impact of exploiting CVE-2002-1382?

Exploitation of CVE-2002-1382 can lead to unauthorized access or control over the affected device, which may compromise sensitive data.