CVE-2002-1625: Macromedia Flash Player

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attackers to cause a denial of service (bandwidth, resource, and CPU consumption) via the (1) loadMovie or (2) loadSound commands, which continue to execute until the browser is closed.

Affected products

• Macromedia Flash Player: version 6.0 only

Published 2002-12-31. Last modified 2026-06-16.