CVE-2005-3591: Macromedia Flash Player

High severity, CVSS 7.5. EPSS: 10.4% chance of exploitation in the next 30 days.

Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via parameters to the ActionDefineFunction ActionScript call in a SWF file, which causes an improper memory access condition, a different vulnerability than CVE-2005-2628.

Affected products

• Macromedia Flash Player: version 6.0 only; version 6.0.29.0 only; version 6.0.40.0 only; version 6.0.47.0 only; version 6.0.65.0 only; version 6.0.79.0 only; …

Published 2005-11-16. Last modified 2026-06-16.