CVE-2003-1017 describes a vulnerability in Macromedia Flash Player versions prior to 7.0.19.0, where Flash data files were stored in a predictable location. This allowed remote attackers to read restricted files by exploiting vulnerabilities in web browsers like Internet Explorer and Opera that relied on these predictable file names. The vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and potential for partial confidentiality impact. While there is an ExploitDB entry detailing a predictable file location issue, there is no evidence of active exploitation, Metasploit modules, or significant community discussion surrounding this older vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
5.0CPE matchmatch criteria | cpe:2.3:a:macromedia:director:5.0:*:*:*:*:*:*:* | ||
4.0_r12CPE matchmatch criteria | cpe:2.3:a:macromedia:flash_player:4.0_r12:*:*:*:*:*:*:* | ||
5.0CPE matchmatch criteria | cpe:2.3:a:macromedia:flash_player:5.0:*:*:*:*:*:*:* | ||
5.0_r50CPE matchmatch criteria | cpe:2.3:a:macromedia:flash_player:5.0_r50:*:*:*:*:*:*:* | ||
6.0CPE matchmatch criteria | cpe:2.3:a:macromedia:flash_player:6.0:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.