CVE-2005-3591

CVE-2005-3591 describes a denial-of-service and potential arbitrary code execution vulnerability in Macromedia Flash Player versions 7.0.19.0 (Windows) and earlier, and libflashplayer.so before 7.0.25.0 (Unix). This flaw arises from improper memory access when processing specific parameters within the ActionDefineFunction ActionScript call in a malicious SWF file. The vulnerability carries a CVSS score of 7.5, indicating high severity, with a low attack complexity and no authentication required for exploitation. A successful attack could lead to a system crash (denial of service) and potentially allow an attacker to execute arbitrary code. While not listed on the CISA KEV catalog, an ExploitDB entry (EDB-1331) exists for a denial-of-service exploit. There is no evidence of active exploitation, and the CVE has received minimal community discussion or media coverage.