CVE-2002-1382: Macromedia Flash Player

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash file format (SWF) files, a different issue than CAN-2002-0846.

Affected products

• Macromedia Flash Player: version 4.0_r12 only; version 5.0 only; version 5.0_r50 only; version 6.0 only; version 6.0.29.0 only; version 6.0.40.0 only; …

Published 2002-12-23. Last modified 2026-06-16.