CVE-2002-1467: Macromedia Flash Player

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via (1) an HTTP redirect, (2) a "file://" base in a web document, or (3) a relative URL from a web archive (mht file).

Affected products

• Macromedia Flash Player: version 6.0 only; version 6.0.29.0 only; version 6.0.40.0 only
• Macromedia Shockwave: version 8.0 only

Published 2003-04-22. Last modified 2026-06-16.