CVE-2005-3591: macromedia flash_player Improper Input Validation

EPSS trend

Probability

10.45%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 10.45% on 19-09-2026

19-09-202619-10-2026

EPSS score

10.45%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (sec-consult.com)
Maturity: unknown
exploit-databasedosmultipleVerified
Macromedia Flash Plugin 7.0.19.0 - 'action' Denial of Service
Maturity: poc

References

13 links

secunia.com/advisories/17738/Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/17626/Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2005/2317VDB EntryX Refsource VUPENVendor Advisory
www.securityfocus.com/bid/15334VDB EntryX Refsource BIDExploitPatch
marc.info?l=bugtraq&m=113140426614670&w=2Mailing ListX Refsource BUGTRAQ
www.macromedia.com/devnet/security/security_zone/mpsb05-07.htmlX Refsource CONFIRMVendor Advisory
secunia.com/advisories/17481/Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.sec-consult.com/226.htmlX Refsource MISCExploitPatchVendor Advisory
securityreason.com/securityalert/149Third Party AdvisoryX Refsource SREASON
exchange.xforce.ibmcloud.com/vulnerabilities/23022VDB EntryX Refsource XF

Show all 13 references

secunia.com/advisories/17430/Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.microsoft.com/technet/security/advisory/910550.mspxVendor AdvisoryX Refsource MSKB
secunia.com/advisories/17437/Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Related vulnerabilities

CVE-2003-1017macromediadirector+13.00%22y ago17-12-2003 05:00Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.CVE-2005-2628macromediaflash_player6.76%20y ago05-11-2005 11:00Macromedia Flash 6 and 7 (Flash.ocx) allows remote attackers to execute arbitrary code via a SWF file with a modified frame type identifier that is used as an out-of-bounds array index to a function pointer.CVE-2010-2181adobeair+27.44%16y ago15-06-2010 17:48Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2170 and CVE-2010-2183.CVE-2010-2170adobeair+27.44%16y ago15-06-2010 17:48Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2181 and CVE-2010-2183.CVE-2010-2165adobeair+26.08%16y ago15-06-2010 17:48Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.CVE-2010-2163adobeair+27.13%16y ago15-06-2010 17:48Multiple unspecified vulnerabilities in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unknown vectors.

All vulnerabilities inflash_player

CVE-2005-3591: macromedia flash_player Improper Input Validation

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References