CVE-2005-3591

2005-11-1607:42:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2005-3591

macromedia flash plugin

denial of service

arbitrary code execution

swf file

memory access condition

vulnerability

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.929 High

EPSS

Percentile

99.0%

JSON

Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via parameters to the ActionDefineFunction ActionScript call in a SWF file, which causes an improper memory access condition, a different vulnerability than CVE-2005-2628.

CPENameOperatorVersion
macromedia:flash_playermacromedia flash playereq6.0.79.0
macromedia:flash_playermacromedia flash playereq7.0_r19
macromedia:flash_playermacromedia flash playereq6.0.65.0
macromedia:flash_playermacromedia flash playereq6.0.29.0
macromedia:flash_playermacromedia flash playereq6.0
macromedia:flash_playermacromedia flash playereq6.0.47.0
macromedia:flash_playermacromedia flash playereq6.0.40.0
macromedia:flash_playermacromedia flash playereq7.0.19.0

CPE	Name	Operator	Version
macromedia:flash_player	macromedia flash player	eq	6.0.79.0
macromedia:flash_player	macromedia flash player	eq	7.0_r19
macromedia:flash_player	macromedia flash player	eq	6.0.65.0
macromedia:flash_player	macromedia flash player	eq	6.0.29.0
macromedia:flash_player	macromedia flash player	eq	6.0
macromedia:flash_player	macromedia flash player	eq	6.0.47.0
macromedia:flash_player	macromedia flash player	eq	6.0.40.0
macromedia:flash_player	macromedia flash player	eq	7.0.19.0