Vulnerability Details : CVE-2003-1017
Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.
Exploit prediction scoring system (EPSS) score for CVE-2003-1017
Probability of exploitation activity in the next 30 days: 0.77%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 79 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2003-1017
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
NIST |
References for CVE-2003-1017
-
http://www.macromedia.com/devnet/security/security_zone/mpsb03-08.html
Patch;Vendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/14013
-
http://www.securityfocus.com/bid/8900
Exploit;Patch;Vendor Advisory
Products affected by CVE-2003-1017
- cpe:2.3:a:macromedia:flash_player:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:macromedia:flash_player:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:macromedia:flash_player:4.0_r12:*:*:*:*:*:*:*
- cpe:2.3:a:macromedia:flash_player:5.0_r50:*:*:*:*:*:*:*
- cpe:2.3:a:macromedia:flash_player:6.0.29.0:*:*:*:*:*:*:*
- cpe:2.3:a:macromedia:flash_player:6.0.40.0:*:*:*:*:*:*:*
- cpe:2.3:a:macromedia:flash_player:6.0.47.0:*:*:*:*:*:*:*
- cpe:2.3:a:macromedia:flash_player:6.0.79.0:*:*:*:*:*:*:*
- cpe:2.3:a:macromedia:flash_player:6.0.65.0:*:*:*:*:*:*:*
- cpe:2.3:a:macromedia:director:5.0:*:*:*:*:*:*:*