{"id":"CVE-2003-1017","aliases":["EUVD-2003-1007","GHSA-mgw8-f263-mhhf"],"status":"published","title":"Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that...","description":"Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-06","score":0.03497,"percentile":0.89211,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2003-12-17T05:00:00Z","modified":"2026-06-16T22:03:22Z","exploits":[{"source":"exploitdb","id":"EDB-23298","title":"Macromedia Flash Player 6.0.x - Flash Cookie Predictable File Location","type":"remote","platform":"windows","date":"2003-10-24","verified":true,"url":"https://www.exploit-db.com/exploits/23298"}],"products":[{"vendor":"macromedia","product":"director"},{"vendor":"macromedia","product":"flash_player"}],"references":[{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb03-08.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14013","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/8900","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-1017"},{"url":"https://github.com/advisories/GHSA-mgw8-f263-mhhf"}],"sources":{"cve":[{"id":"CVE-2003-1017","description":"Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.","status":"published","published":"2003-12-17T05:00:00Z","modified":"2024-08-08T02:12:35.392Z","updated_at":"2026-11-02T14:20:16.411288Z"}],"euvd":[{"id":"EUVD-2003-1007","description":"Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.","status":"published","published":"2003-12-17T05:00:00Z","modified":"2024-08-08T02:12:35Z","updated_at":"2026-11-03T01:15:05.487655Z"}],"ghsa":[{"id":"GHSA-mgw8-f263-mhhf","title":"Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that...","description":"Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.","status":"published","published":"2022-04-29T01:27:21Z","modified":"2023-01-30T05:01:46Z","updated_at":"2026-11-02T14:46:28.825002Z"}],"nvd":[{"id":"CVE-2003-1017","description":"Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.","status":"published","published":"2004-01-05T05:00:00Z","modified":"2026-06-16T22:03:22.003Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:48.212104Z"}]}}