Vulnerabilities > Macromedia > Flash Player > High

DATE CVE VULNERABILITY TITLE RISK
2005-11-16 CVE-2005-3591 Improper Input Validation vulnerability in Macromedia Flash Player
Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via parameters to the ActionDefineFunction ActionScript call in a SWF file, which causes an improper memory access condition, a different vulnerability than CVE-2005-2628.
network
low complexity
macromedia CWE-20
7.5
2002-12-23 CVE-2002-1382 SWF Buffer Overflow vulnerability in Macromedia Flash
Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash file format (SWF) files, a different issue than CAN-2002-0846.
network
low complexity
macromedia
7.5
2002-08-12 CVE-2002-0477 Unspecified vulnerability in Macromedia Flash Player 5.0
Standalone Macromedia Flash Player 5.0 before 5,0,30,2 allows remote attackers to execute arbitrary programs via a .SWF file containing the "exec" FSCommand.
network
low complexity
macromedia
7.5
2002-06-18 CVE-2002-0605 Buffer Overflow vulnerability in Macromedia Flash Player 6.0
Buffer overflow in Flash OCX for Macromedia Flash 6 revision 23 (6,0,23,0) allows remote attackers to execute arbitrary code via a long movie parameter.
network
low complexity
macromedia
7.5