5.0med
CVE-2003-10171 exploit
Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Inter…
Published 22 y ago · modified 4 mo ago · JSON
CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.5%
percentile 89%
Public exploits
1
Exploit-DB
Summary
Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.
Exploit prediction (EPSS)
3.50% probability of exploitation in the next 30 days, higher than 89% of all scored CVEs.
Exploits and detections
- EDB-23298 Macromedia Flash Player 6.0.x - Flash Cookie Predictable File Location · remote · 2003-10-24
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
References
- macromedia.com /devnet/security/security_zone/mpsb03-08.html · x_refsource_CONFIRM, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/14013 · vdb-entry, x_refsource_XF, x_transferred
- securityfocus.com /bid/8900 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2003-1017
- NVD: CVE-2003-1017
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.