CVE-2002-1625: Medium severity Macromedia Flash Player vulnerability

Published Dec 31, 2002

Updated

Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attackers to cause a denial of service (bandwidth, resource, and CPU consumption) via the (1) loadMovie or (2) loadSound commands, which continue to execute until the browser is closed.

Affected Software

1 affected component

Macromedia Flash Player=6.0

Remediation

Patch Available

http://www.kb.cert.org/vuls/id/128491

Event History

Dec 31, 2002

CVE Published

05:00 AM

Mar 26, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1625?

CVE-2002-1625 is considered to be a moderate severity vulnerability due to its potential for denial of service.

How does CVE-2002-1625 affect users of Macromedia Flash Player 6?

CVE-2002-1625 allows remote attackers to cause resource exhaustion by exploiting unclosed connections, leading to denial of service.

What commands are related to CVE-2002-1625?

The commands related to CVE-2002-1625 are loadMovie and loadSound, which continue to execute after the user navigates away.

How can I mitigate the effects of CVE-2002-1625?

Mitigation for CVE-2002-1625 includes avoiding the use of Macromedia Flash Player 6 or ensuring proper closure of connections.

Is there a patch available for CVE-2002-1625?

There is no specific patch available for CVE-2002-1625, and upgrading to a more secure version of Flash Player is recommended.