CVE-2006-3311: Adobe Flash Player

Medium severity, CVSS 5.1. EPSS: 17.9% chance of exploitation in the next 30 days.

Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote attackers to execute arbitrary code via a long, dynamically created string in a SWF movie.

Affected products

• Adobe Flash Player: up to and including 8.0.24.0; version 8 only; version mx_2004 only
• Adobe Flex SDK: version 1.5 only

Published 2006-09-12. Last modified 2026-06-16.