Description
Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via parameters to the ActionDefineFunction ActionScript call in a SWF file, which causes an improper memory access condition, a different vulnerability than CVE-2005-2628.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Macromedia Flash Plugin 7.0.19.0 - 'action' Denial of Service EDB-1331 · dos · Nov 18, 2005 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 17738 third-party-advisory
- 17626 third-party-advisory
- ADV-2005-2317 vdb-entry
- 15334 vdb-entry
- 20051107 SEC Consult SA-20051107-1 :: Macromedia Flash Player ActionDefineFunction mailing-list
- http://www.macromedia.com/devnet/security/security_zone/mpsb05-07.html
- 17481 third-party-advisory
- http://www.sec-consult.com/226.html
- 149 third-party-advisory
- flash-actiondefinefunction-doaction-bo(23022) vdb-entry
- 17430 third-party-advisory
- Q910550 vendor-advisory
- 17437 third-party-advisory