CVE-2003-1017
First published: Wed Dec 17 2003(Updated: )
Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Flash Player | =5.0_r50 | |
| Adobe Flash Player | =5.0 | |
| Adobe Flash Player | =6.0.79.0 | |
| Adobe Director | =5.0 | |
| Adobe Flash Player | =6.0.65.0 | |
| Adobe Flash Player | =6.0.29.0 | |
| Adobe Flash Player | =6.0 | |
| Adobe Flash Player | =4.0_r12 | |
| Adobe Flash Player | =6.0.47.0 | |
| Adobe Flash Player | =6.0.40.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2003-1017?
CVE-2003-1017 is categorized as a moderate severity vulnerability due to its potential for unauthorized access to restricted files.
How do I fix CVE-2003-1017?
To fix CVE-2003-1017, upgrade to a later version of Macromedia Flash Player that is not affected by this vulnerability, specifically versions 7.0.19.0 or higher.
What are the affected versions in CVE-2003-1017?
CVE-2003-1017 affects Macromedia Flash Player versions 4.0_r12 through 6.0.79.0, as well as Macromedia Director 5.0.
Can CVE-2003-1017 be exploited remotely?
Yes, CVE-2003-1017 can be exploited remotely by attackers who leverage predictable file names to access restricted files through a web browser.
What is the primary risk of CVE-2003-1017?
The primary risk of CVE-2003-1017 is that it allows unauthorized users to read sensitive information stored in predictable locations.
- agent/type
- agent/softwarecombine
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/macromedia
- canonical/adobe flash player
- version/adobe flash player/5.0_r50
- version/adobe flash player/5.0
- version/adobe flash player/6.0.79.0
- canonical/adobe director
- version/adobe director/5.0
- version/adobe flash player/6.0.65.0
- version/adobe flash player/6.0.29.0
- version/adobe flash player/6.0
- version/adobe flash player/4.0_r12
- version/adobe flash player/6.0.47.0
- version/adobe flash player/6.0.40.0