CVE-2005-3591

Name: CVE-2005-3591
Creator: NVD / NIST
Published: 2005-11-16T07:42:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 10.45%

Last modified Jun 16, 2026

CVE-2005-3591 is a vulnerability of currently unknown severity. Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via parameters to the ActionDefineFunction ActionScript call in a SWF file, which causes an improper memory access condition, a different vulnerability than CVE-2005-2628.. EPSS estimates a 10.45% chance of exploitation in the next 30 days.

Description

Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via parameters to the ActionDefineFunction ActionScript call in a SWF file, which causes an improper memory access condition, a different vulnerability than CVE-2005-2628.

Metrics

EPSS Probability

10.45%

95.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-20

Affected Software

Vendor	Product	Versions
Macromedia	Flash Player	6.0
Macromedia	Flash Player	6.0.29.0
Macromedia	Flash Player	6.0.40.0
Macromedia	Flash Player	6.0.47.0
Macromedia	Flash Player	6.0.65.0
Macromedia	Flash Player	6.0.79.0
Macromedia	Flash Player	7.0.19.0
Macromedia	Flash Player	7.0_r19

References

http://marc.info/?l=bugtraq&m=113140426614670&w=2
http://secunia.com/advisories/17430/Patch, Vendor Advisory
http://secunia.com/advisories/17437/Vendor Advisory
http://secunia.com/advisories/17481/Vendor Advisory
http://secunia.com/advisories/17626/Vendor Advisory
http://secunia.com/advisories/17738/Vendor Advisory
http://securityreason.com/securityalert/149
http://www.macromedia.com/devnet/security/security_zone/mpsb05-07.htmlVendor Advisory
http://www.microsoft.com/technet/security/advisory/910550.mspxVendor Advisory
http://www.sec-consult.com/226.htmlExploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/15334Exploit, Patch
http://www.vupen.com/english/advisories/2005/2317Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/23022
http://marc.info/?l=bugtraq&m=113140426614670&w=2
http://secunia.com/advisories/17430/Patch, Vendor Advisory
http://secunia.com/advisories/17437/Vendor Advisory
http://secunia.com/advisories/17481/Vendor Advisory
http://secunia.com/advisories/17626/Vendor Advisory
http://secunia.com/advisories/17738/Vendor Advisory
http://securityreason.com/securityalert/149
http://www.macromedia.com/devnet/security/security_zone/mpsb05-07.htmlVendor Advisory
http://www.microsoft.com/technet/security/advisory/910550.mspxVendor Advisory
http://www.sec-consult.com/226.htmlExploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/15334Exploit, Patch
http://www.vupen.com/english/advisories/2005/2317Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/23022

Timeline

Published: Nov 16, 2005
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2005-3591?

How severe is CVE-2005-3591?

Severity scoring for CVE-2005-3591 is pending analysis. The EPSS model estimates a 10.45% probability of exploitation in the next 30 days.

How do I fix CVE-2005-3591?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2005-3591?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST