CVE-2005-3591
- State
- Published
- Severity
- Not scored
- Published
- Nov 16, 2005
- Updated
- Aug 7, 2024
- Reserved
- Nov 16, 2005
Description
Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via parameters to the ActionDefineFunction ActionScript call in a SWF file, which causes an improper memory access condition, a different vulnerability than CVE-2005-2628.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 17738third-party-advisory
- 17626third-party-advisory
- ADV-2005-2317vdb-entry
- 15334vdb-entry
- 20051107 SEC Consult SA-20051107-1 :: Macromedia Flash Player ActionDefineFunctionmailing-list
- http://www.macromedia.com/devnet/security/security_zone/mpsb05-07.html
- 17481third-party-advisory
- http://www.sec-consult.com/226.html
- 149third-party-advisory
- flash-actiondefinefunction-doaction-bo(23022)vdb-entry
- 17430third-party-advisory
- Q910550vendor-advisory
- 17437third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.