Exploit Macromedia Flash Player 6.0.x - Flash Cookie Predictable File Location

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
23298
Проверка EDB
  1. Пройдено
Автор
MINDWARPER
Тип уязвимости
REMOTE
Платформа
WINDOWS
CVE
cve-2003-1017
Дата публикации
2003-10-24
Код:
source: https://www.securityfocus.com/bid/8900/info

Macromedia Flash Player is reported to store Flash cookies (.sol files) in a predictable location on client systems. Other attacks are possible given the ability to store content on a system in a predictable location, such as referencing the content via a file:// URI. This is compounded by the fact that an attacker could include HTML and script code in the cookie, which may be interpreted by Internet Explorer or possibly other browsers. In the example of Internet Explorer, such content would be interpreted in the context of the Local Zone. Successful exploitation would still require the attacker to guess the local username of the victim.

This issue is reported to affect versions of the player for Microsoft Windows operating systems. Other versions may also be affected. Macromedia Director MX is similarly affected.

This issue affects versions of the player prior to 7.0.19.0. 

ftp://%@/../../../../Application Data/Macromedia/Flash
Player/YOURDOMAINNAME.TLD\YOURDOMAINNAME.sol
 
Источник
www.exploit-db.com

Похожие темы