CVE-2005-3591

HIGH 7.5CVE-2005-3591 · Published 16/11/2005 · updated 16/06/2026

Package	Affected versions	Patched versions
flash player macromedia	`= 6.0= 6.0.29.0= 6.0.40.0= 6.0.47.0= 6.0.65.0= 6.0.79.0= 7.0.19.0= 7.0_r19`	No fix yet

Description

Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via parameters to the ActionDefineFunction ActionScript call in a SWF file, which causes an improper memory access condition, a different vulnerability than CVE-2005-2628.

References

marc.info
secunia.com/advisories/17430 · Patch
secunia.com/advisories/17437 · Vendor Advisory
secunia.com/advisories/17481 · Vendor Advisory
secunia.com/advisories/17626 · Vendor Advisory
secunia.com/advisories/17738 · Vendor Advisory
securityreason.com/securityalert/149
macromedia.com/devnet/security/security_zone/mpsb05-07.html · Vendor Advisory
microsoft.com/technet/security/advisory/910550.mspx · Vendor Advisory
sec-consult.com/226.html · Exploit
securityfocus.com/bid/15334 · Exploit
vupen.com/english/advisories/2005/2317 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/23022

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free