Macromedia Flash Malformed SWF File Multiple Vulnerabilities

BID:18894

CVE-2006-3587 | CVE-2006-3588 |

Info

Macromedia Flash Malformed SWF File Multiple Vulnerabilities

Bugtraq ID: 18894
Class: Unknown
CVE: CVE-2006-3587
Remote: Yes
Local: No
Published: Jul 07 2006 12:00AM
Updated: Nov 23 2006 09:05PM
Credit: Haifei Li of Fortinet Security Research team discovered these vulnerabilities.
Vulnerable: Turbolinux Turbolinux FUJI
Redhat Enterprise Linux Extras 4
Redhat Enterprise Linux Extras 3
Nortel Networks Self-Service Peri NT Server 0
Nortel Networks Self-Service Peri IVR 0
Nortel Networks Enterprise Network Management System
Microsoft Windows XP Tablet PC Edition SP2
Microsoft Windows XP Tablet PC Edition SP1
Microsoft Windows XP Tablet PC Edition
Microsoft Windows XP Professional x64 Edition
Microsoft Windows XP Professional SP2
Microsoft Windows XP Professional SP1
Microsoft Windows XP Professional
Microsoft Windows XP Media Center Edition SP2
Microsoft Windows XP Media Center Edition SP1
Microsoft Windows XP Media Center Edition
Microsoft Windows XP 64-bit Edition Version 2003 SP1
Microsoft Windows XP 64-bit Edition Version 2003
Microsoft Windows XP 64-bit Edition SP1
Microsoft Windows XP 64-bit Edition
Microsoft Windows XP 0
Macromedia Flash 8.0.24 .0
Macromedia Flash 8.0.22 .0
Macromedia Flash 7.0.63 .0
Macromedia Flash 7.0.61 .0
Macromedia Flash 7.0.60 .0
Macromedia Flash 7.0.25 .0
Macromedia Flash 7.0.19 .0
Macromedia Flash 7.0 r19
Macromedia Flash 6.0.79 .0
Macromedia Flash 6.0.65 .0
Macromedia Flash 6.0.47 .0
Macromedia Flash 6.0.40 .0
Macromedia Flash 6.0.29 .0
Macromedia Flash 6.0
+ Microsoft Internet Explorer 5.0.1 SP2
 + Microsoft Internet Explorer 5.0.1 SP2
 + Microsoft Internet Explorer 5.0.1 SP1
 + Microsoft Internet Explorer 5.0.1 SP1
 + Microsoft Internet Explorer 5.0.1
+ Microsoft Internet Explorer 5.0.1
+ Microsoft Internet Explorer 6.0
 + Microsoft Internet Explorer 6.0
 + Microsoft Internet Explorer 5.5 SP2
 + Microsoft Internet Explorer 5.5 SP2
 + Microsoft Internet Explorer 5.5 SP1
 + Microsoft Internet Explorer 5.5 SP1
 + Microsoft Internet Explorer 5.5 preview
 + Microsoft Internet Explorer 5.5 preview
 + Microsoft Internet Explorer 5.5
 + Microsoft Internet Explorer 5.5
 + Microsoft Internet Explorer 5.0
 + Microsoft Internet Explorer 5.0
 + Microsoft Windows XP Embedded SP3
 + Microsoft Windows XP Embedded SP2
 + Microsoft Windows XP Home SP3
 + Microsoft Windows XP Home SP2
 + Microsoft Windows XP Media Center Edition SP3
 + Microsoft Windows XP Media Center Edition SP2
 + Microsoft Windows XP Professional SP3
 + Microsoft Windows XP Professional SP2
 + Microsoft Windows XP Professional x64 Edition SP2
 + Microsoft Windows XP Tablet PC Edition SP3
 + Microsoft Windows XP Tablet PC Edition SP2
 + Netscape Communicator 6.1
+ Netscape Communicator 6.1
+ Netscape Communicator 4.78
+ Netscape Communicator 4.78
+ Netscape Communicator 4.77
+ Netscape Communicator 4.77
+ Netscape Communicator 4.76
+ Netscape Communicator 4.76
+ Netscape Communicator 4.75
+ Netscape Communicator 4.75
+ Netscape Communicator 4.74
+ Netscape Communicator 4.74
+ Netscape Communicator 4.73
+ Netscape Communicator 4.73
+ Netscape Communicator 4.72
+ Netscape Communicator 4.72
+ Netscape Communicator 4.61
+ Netscape Communicator 4.61
+ Netscape Communicator 4.51
+ Netscape Communicator 4.51
+ Netscape Communicator 4.7
+ Netscape Communicator 4.7
+ Netscape Communicator 4.6
+ Netscape Communicator 4.6
+ Redhat netscape-common-4.76-11.i386.rpm
+ Redhat netscape-common-4.78-2.i386.rpm
+ Redhat netscape-common-4.79-1.i386.rpm
+ Redhat netscape-communicator-4.76-11.i386.rpm
+ Redhat netscape-communicator-4.78-2.i386.rpm
+ Redhat netscape-communicator-4.79-1.i386.rpm
+ Redhat netscape-navigator-4.76-11.i386.rpm
+ Redhat netscape-navigator-4.78-2.i386.rpm
+ Redhat netscape-navigator-4.79-1.i386.rpm
Macromedia Flash 5.0 r50
Macromedia Flash 5.0
- Microsoft Windows 2000 Advanced Server SP2
 - Microsoft Windows 2000 Advanced Server SP1
 - Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Professional SP2
 - Microsoft Windows 2000 Professional SP1
 - Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Server SP2
 - Microsoft Windows 2000 Server SP1
 - Microsoft Windows 2000 Server
- Microsoft Windows 95 SR2
 - Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows 98SE
- Microsoft Windows ME
- Microsoft Windows NT Enterprise Server 4.0 SP6a
 - Microsoft Windows NT Enterprise Server 4.0 SP6
 - Microsoft Windows NT Enterprise Server 4.0 SP5
 - Microsoft Windows NT Enterprise Server 4.0 SP4
 - Microsoft Windows NT Enterprise Server 4.0 SP3
 - Microsoft Windows NT Enterprise Server 4.0 SP2
 - Microsoft Windows NT Enterprise Server 4.0 SP1
 - Microsoft Windows NT Enterprise Server 4.0
 - Microsoft Windows NT Server 4.0 SP6a
 - Microsoft Windows NT Server 4.0 SP6
 - Microsoft Windows NT Server 4.0 SP5
 - Microsoft Windows NT Server 4.0 SP4
 - Microsoft Windows NT Server 4.0 SP3
 - Microsoft Windows NT Server 4.0 SP2
 - Microsoft Windows NT Server 4.0 SP1
 - Microsoft Windows NT Server 4.0
 - Microsoft Windows NT Workstation 4.0 SP6a
 - Microsoft Windows NT Workstation 4.0 SP6
 - Microsoft Windows NT Workstation 4.0 SP5
 - Microsoft Windows NT Workstation 4.0 SP4
 - Microsoft Windows NT Workstation 4.0 SP3
 - Microsoft Windows NT Workstation 4.0 SP2
 - Microsoft Windows NT Workstation 4.0 SP1
 - Microsoft Windows NT Workstation 4.0
 - Microsoft Windows XP Home
- Microsoft Windows XP Professional
Macromedia Flash 4.0 r12
Apple Mac OS X Server 10.4.7
Apple Mac OS X Server 10.4.6
Apple Mac OS X Server 10.4.5
Apple Mac OS X Server 10.4.4
Apple Mac OS X Server 10.4.3
Apple Mac OS X Server 10.4.2
Apple Mac OS X Server 10.4.1
Apple Mac OS X Server 10.4
Apple Mac OS X Server 10.3.9
Apple Mac OS X Server 10.3.8
Apple Mac OS X Server 10.3.7
Apple Mac OS X Server 10.3.6
Apple Mac OS X Server 10.3.5
Apple Mac OS X Server 10.3.4
Apple Mac OS X Server 10.3.3
Apple Mac OS X Server 10.3.2
Apple Mac OS X Server 10.3.1
Apple Mac OS X Server 10.3
Apple Mac OS X 10.4.7
Apple Mac OS X 10.4.6
Apple Mac OS X 10.4.5
Apple Mac OS X 10.4.4
Apple Mac OS X 10.4.3
Apple Mac OS X 10.4.2
Apple Mac OS X 10.4.1
Apple Mac OS X 10.4
Apple Mac OS X 10.3.9
Apple Mac OS X 10.3.8
Apple Mac OS X 10.3.7
Apple Mac OS X 10.3.6
Apple Mac OS X 10.3.5
Apple Mac OS X 10.3.4
Apple Mac OS X 10.3.3
Apple Mac OS X 10.3.2
Apple Mac OS X 10.3.1
Apple Mac OS X 10.3
Not Vulnerable: Macromedia Flash 8.0.33.0
Macromedia Flash 7.0.68.0
Macromedia Flash 7.0.66.0
Macromedia Flash 6.0.88.0

Discussion

Macromedia Flash Malformed SWF File Multiple Vulnerabilities

The Macromedia Flash plug-in is prone to multiple remote vulnerabilities.

An attacker can exploit these vulnerabilities to execute arbitrary code or to crash the application hosting the Flash player (typically a web browser). Attackers exploit these issues through maliciously malformed SWF files that have been placed on a website or emailed to unsuspecting users.

Version 8.0.24.0 of Flash is vulnerable to these issues; other versions may also be affected.

Exploit / POC

Macromedia Flash Malformed SWF File Multiple Vulnerabilities

Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Solution / Fix

Macromedia Flash Malformed SWF File Multiple Vulnerabilities

Solution:
The vendor has released a fix to resolve this issue.

Please see the references for more information.


Microsoft Windows XP Media Center Edition SP2

Microsoft Windows XP Tablet PC Edition SP2

Microsoft Windows XP Professional x64 Edition

Microsoft Windows XP Professional SP2

Apple Mac OS X Server 10.3.9

Apple Mac OS X 10.3.9

Apple Mac OS X 10.4

Apple Mac OS X Server 10.4

Apple Mac OS X Server 10.4.1

Apple Mac OS X 10.4.1

Apple Mac OS X 10.4.2

Apple Mac OS X Server 10.4.2

Apple Mac OS X Server 10.4.3

Apple Mac OS X 10.4.3

Apple Mac OS X Server 10.4.4

Apple Mac OS X 10.4.4

Apple Mac OS X Server 10.4.5

Apple Mac OS X 10.4.5

Apple Mac OS X Server 10.4.6

Apple Mac OS X 10.4.6

Apple Mac OS X Server 10.4.7

Apple Mac OS X 10.4.7

Macromedia Flash 8.0.24 .0

References

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report