Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via parameters to the ActionDefineFunction ActionScript call in a SWF file, which causes an improper memory access condition, a different vulnerability than CVE-2005-2628.

Updated Macromedia Flash Player packages that fix a security issue are now available.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

The flash-plugin package contains a Mozilla-compatible Macromedia Flash Player browser plug-in.

A buffer overflow bug was discovered in the Macromedia Flash Player.
It may be possible to execute arbitrary code on a victim's machine if the victim opens a malicious Macromedia Flash file. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-2628 to this issue.

Users of Macromedia Flash Player should upgrade to these updated packages, which contain version 7.0.61 and are not vulnerable to this issue.

The remote host is running Apple Mac OS X, but lacks Security Update 2006-003. This security update contains fixes for the following applications :
AppKit
ImageIO
BOM
CFNetwork
ClamAV (Mac OS X Server only)
CoreFoundation
CoreGraphics
Finder
FTPServer
Flash Player
KeyChain
LaunchServices
libcurl
Mail
MySQL Manager (Mac OS X Server only)
Preview
QuickDraw
QuickTime Streaming Server
Ruby
Safari

According to its version number, the instance of Macromedia's Flash Player on the remote host fails to validate the frame type identifier from SWF files before using that as an index into an array of function pointers.  An attacker may be able to leverage this issue using a specially crafted SWF file to execute arbitrary code on the remote host subject to the permissions of the user running Flash Player.

ID	Name	Product	Family	Severity
63830	RHEL 3 / 4 : flash-plugin (RHSA-2005:835)	Nessus	Red Hat Local Security Checks	high
3617	Mac OS X Multiple Vulnerabilities (Security Update 2006-003)	Nessus Network Monitor	Operating System Detection	medium
20158	Flash Player < 7.0.60.0 / 8.0.22.0 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2005-3591

critical

Tenable Plugins

high

medium

high