Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2005-3591
HistoryNov 16, 2005 - 7:42 a.m.

CVE-2005-3591

2005-11-1607:42:00
CWE-20
[email protected]
web.nvd.nist.gov
5

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.939

Percentile

99.1%

JSON

Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via parameters to the ActionDefineFunction ActionScript call in a SWF file, which causes an improper memory access condition, a different vulnerability than CVE-2005-2628.

Affected configurations

Nvd
Node
macromediaflash_playerMatch6.0
OR
macromediaflash_playerMatch6.0.29.0
OR
macromediaflash_playerMatch6.0.40.0
OR
macromediaflash_playerMatch6.0.47.0
OR
macromediaflash_playerMatch6.0.65.0
OR
macromediaflash_playerMatch6.0.79.0
OR
macromediaflash_playerMatch7.0.19.0
OR
macromediaflash_playerMatch7.0_r19
VendorProductVersionCPE
macromediaflash_player6.0cpe:2.3:a:macromedia:flash_player:6.0:*:*:*:*:*:*:*
macromediaflash_player6.0.29.0cpe:2.3:a:macromedia:flash_player:6.0.29.0:*:*:*:*:*:*:*
macromediaflash_player6.0.40.0cpe:2.3:a:macromedia:flash_player:6.0.40.0:*:*:*:*:*:*:*
macromediaflash_player6.0.47.0cpe:2.3:a:macromedia:flash_player:6.0.47.0:*:*:*:*:*:*:*
macromediaflash_player6.0.65.0cpe:2.3:a:macromedia:flash_player:6.0.65.0:*:*:*:*:*:*:*
macromediaflash_player6.0.79.0cpe:2.3:a:macromedia:flash_player:6.0.79.0:*:*:*:*:*:*:*
macromediaflash_player7.0.19.0cpe:2.3:a:macromedia:flash_player:7.0.19.0:*:*:*:*:*:*:*
macromediaflash_player7.0_r19cpe:2.3:a:macromedia:flash_player:7.0_r19:*:*:*:*:*:*:*

Related

cvelist 2
cve 2
nessus 4
redhat 1
openvas 4
nvd 1
cert 1
securityvulns 5
checkpoint_advisories 2
packetstorm 1
exploitdb 1
ubuntucve 1
gentoo 1
cvelist
cvelist
CVE-2005-3591
2005-11-16 07:37:00
CVE-2005-2628
2005-11-05 11:00:00
cve
cve
CVE-2005-3591
2005-11-16 07:42:00
CVE-2005-2628
2005-11-05 11:02:00
nessus
nessus
Flash Player < 7.0.60.0 / 8.0.22.0 Multiple Vulnerabilities
2005-11-07 00:00:00
RHEL 3 / 4 : flash-plugin (RHSA-2005:835)
2013-01-24 00:00:00
GLSA-200511-21 : Macromedia Flash Player: Remote arbitrary code execution
2005-12-07 00:00:00
redhat
redhat
(RHSA-2005:835) flash-plugin security update
2005-11-09 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200511-21 (Flash)
2008-09-24 00:00:00
FreeBSD Ports: linux-flashplugin6
2008-09-04 00:00:00
FreeBSD Ports: linux-flashplugin6
2008-09-04 00:00:00
nvd
nvd
CVE-2005-2628
2005-11-05 11:02:00
cert
cert
Macromedia Flash Player fails to properly validate the frame type identifier read from a "SWF" file
2005-11-11 00:00:00
securityvulns
securityvulns
Netscape Flash Player Arbitrary Code Execution Vulnerability
2005-11-07 00:00:00
[Full-disclosure] SEC Consult SA-20051107-1 :: Macromedia Flash Player ActionDefineFunction Memory Corruption
2005-11-07 00:00:00
[Full-disclosure] [EEYEB-20050627B] Macromedia Flash Player Improper Memory Access Vulnerability
2005-11-05 00:00:00
checkpoint_advisories
checkpoint_advisories
Macromedia Flash ActionDefineFunction Memory Access (CVE-2005-2628)
2010-07-15 00:00:00
Macromedia Flash Player Improper Memory Access (CVE-2005-2628)
2010-08-11 00:00:00
packetstorm
packetstorm
SEC-20051107-1.txt
2005-11-08 00:00:00
exploitdb
exploitdb
Macromedia Flash Plugin 7.0.19.0 - &#039;action&#039; Denial of Service
2005-11-18 00:00:00
ubuntucve
ubuntucve
CVE-2005-2628
2005-11-05 00:00:00
gentoo
gentoo
Macromedia Flash Player: Remote arbitrary code execution
2005-11-25 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.939

Percentile

99.1%

JSON
Related for NVD:CVE-2005-3591
cvelist2cve2nessus4redhat1openvas4nvd1cert1securityvulns5checkpoint_advisories2packetstorm1exploitdb1ubuntucve1gentoo1