First published: Tue Dec 31 2002(Updated: )
Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service (web browser crash) via malformed content in a Flash Shockwave (.SWF) file, as demonstrated by by ROT13 encoding the body of the file but not the headers.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Flash Player | =4.0_r12 | |
Adobe Flash Player | =5.0 | |
Adobe Flash Player | =5.0_r50 | |
Adobe Flash Player | =6.0 | |
Adobe Flash Player | =6.0.29.0 | |
Adobe Flash Player | =6.0.40.0 | |
Adobe Flash Player | =6.0.47.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-1881 is considered a denial of service vulnerability that can cause web browsers to crash.
To mitigate CVE-2002-1881, upgrade your Macromedia Flash Player to a version that is not affected, such as versions beyond 6.0.47.0.
CVE-2002-1881 affects Macromedia Flash Player versions from 4.0 r12 through 6.0.47.0.
Yes, attackers can exploit CVE-2002-1881 remotely by delivering malformed Shockwave Flash (.SWF) content.
CVE-2002-1881 is associated with denial of service attacks that disrupt web browser functionality.