CVE-2002-1467

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via (1) an HTTP redirect, (2) a "file://" base in a web document, or (3) a relative URL from a web archive (mht file).

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://online.securityfocus.com/archive/1/286625Exploit, Patch, Vendor Advisory
http://www.iss.net/security_center/static/9797.phpPatch, Vendor Advisory
http://www.macromedia.com/v1/handlers/index.cfm?ID=23294
http://www.securityfocus.com/bid/5429Patch, Vendor Advisory
http://online.securityfocus.com/archive/1/286625Exploit, Patch, Vendor Advisory
http://www.iss.net/security_center/static/9797.phpPatch, Vendor Advisory
http://www.macromedia.com/v1/handlers/index.cfm?ID=23294
http://www.securityfocus.com/bid/5429Patch, Vendor Advisory

Timeline

Published: Apr 22, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-146810.0Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root.CVE-2002-14697.5scponly does not properly verify the path when finding the (1) scp or (2) sftp-server programs, which could allow remote authenticated users CVE-2002-14702.1SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes CVE-2002-14715.0The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes a new SSL connection after previ CVE-2002-14727.2Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows local users to gain root privile CVE-2002-14734.6Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of service and possibly ex CVE-2002-14745.0Unknown vulnerability or vulnerabilities in TCP/IP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to cause a denia CVE-2002-14755.0Unknown vulnerability in the ARP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to "take over packets destined for CVE-2002-14764.6Buffer overflow in setlocale in libc on NetBSD 1.4.x through 1.6, and possibly other operating systems, when called with the LC_ALL category CVE-2002-14777.5graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in CVE-2002-147810.0Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.CVE-2002-14794.6Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local