CVE-2005-3591

Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via parameters to the ActionDefineFunction ActionScript call in a SWF file, which causes an improper memory access condition, a different vulnerability than CVE-2005-2628.

• CWE-20

• http://marc.info/?l=bugtraq&m=113140426614670&w=2
• http://secunia.com/advisories/17430/Patch, Vendor Advisory
• http://secunia.com/advisories/17437/Vendor Advisory
• http://secunia.com/advisories/17481/Vendor Advisory
• http://secunia.com/advisories/17626/Vendor Advisory
• http://secunia.com/advisories/17738/Vendor Advisory
• http://securityreason.com/securityalert/149
• http://www.macromedia.com/devnet/security/security_zone/mpsb05-07.htmlVendor Advisory
• http://www.microsoft.com/technet/security/advisory/910550.mspxVendor Advisory
• http://www.sec-consult.com/226.htmlExploit, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/15334Exploit, Patch
• http://www.vupen.com/english/advisories/2005/2317Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23022
• http://marc.info/?l=bugtraq&m=113140426614670&w=2
• http://secunia.com/advisories/17430/Patch, Vendor Advisory
• http://secunia.com/advisories/17437/Vendor Advisory
• http://secunia.com/advisories/17481/Vendor Advisory
• http://secunia.com/advisories/17626/Vendor Advisory
• http://secunia.com/advisories/17738/Vendor Advisory
• http://securityreason.com/securityalert/149
• http://www.macromedia.com/devnet/security/security_zone/mpsb05-07.htmlVendor Advisory
• http://www.microsoft.com/technet/security/advisory/910550.mspxVendor Advisory
• http://www.sec-consult.com/226.htmlExploit, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/15334Exploit, Patch
• http://www.vupen.com/english/advisories/2005/2317Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23022

Published

Nov 16, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3585SQL injection vulnerability in forum.php in PhpWebThings 1.4…
• CVE-2005-3586content.php in Mambo 4.5.2 through 4.5.2.3 allows remote att…
• CVE-2005-3587Improper boundary checks in petite.c in Clam AntiVirus (Clam…
• CVE-2005-3588SQL injection vulnerability in admin.php in Advanced Guestbo…
• CVE-2005-3589Buffer overflow in FileZilla Server Terminal 0.9.4d may allo…
• CVE-2005-3590The getgrouplist function in the GNU C library (glibc) befor…
• CVE-2005-3592index.php CuteNews 1.4.0 and earlier allows remote attackers…
• CVE-2005-3594game_score.php in e107 allows remote attackers to insert hig…
• CVE-2005-3595By default Microsoft Windows XP Home Edition installs with a…
• CVE-2005-3596SQL injection vulnerability in ASPKnowledgebase allows remot…
• CVE-2005-3597Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-3618Cross-site request forgery (CSRF) vulnerability in the manag…