CVE-2003-1017

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-01-05 · updated 2026-06-16

Description

Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.

Affected products

Macromedia Director: 5.0
Macromedia Flash Player: 4.0_r12, 5.0, 5.0_r50, 6.0, 6.0.29.0, 6.0.40.0 (+3)

References

http://www.macromedia.com/devnet/security/security_zone/mpsb03-08.html
http://www.securityfocus.com/bid/8900
https://exchange.xforce.ibmcloud.com/vulnerabilities/14013
http://www.macromedia.com/devnet/security/security_zone/mpsb03-08.html
http://www.securityfocus.com/bid/8900
https://exchange.xforce.ibmcloud.com/vulnerabilities/14013

Get alerted when CVE-2003-1017 or the next vulnerability affects your stack