CVE-2005-2628

CVE-2005-2628 describes a critical vulnerability in Macromedia Flash Player versions 6 and 7 (Flash.ocx) that allows remote attackers to execute arbitrary code. This is achieved by crafting a malicious SWF file with a modified frame type identifier, leading to an out-of-bounds array access that can hijack function pointers. With a CVSS score of 5.1 and a FAUCET Risk Score of 88/100, the vulnerability is considered moderately severe due to its network-based attack vector and high attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. Despite its age and high risk score, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.