CVE-2005-2628: Macromedia Flash Player

Medium severity, CVSS 5.1. EPSS: 6.8% chance of exploitation in the next 30 days.

Macromedia Flash 6 and 7 (Flash.ocx) allows remote attackers to execute arbitrary code via a SWF file with a modified frame type identifier that is used as an out-of-bounds array index to a function pointer.

Affected products

• Macromedia Flash Player: version 6.0 only; version 6.0.29.0 only; version 6.0.40.0 only; version 6.0.47.0 only; version 6.0.65.0 only; version 6.0.79.0 only; …

Published 2005-11-05. Last modified 2026-06-16.