CVE-2006-3311

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 17.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-09-12 · updated 2026-06-16

Description

Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote attackers to execute arbitrary code via a long, dynamically created string in a SWF movie.

Affected products

Adobe Flash Player 24.0.0.186 and earlier.: through 8.0.24.0; 8, mx_2004
Adobe Flex Sdk: 1.5

References

http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html
http://secunia.com/advisories/21865
http://secunia.com/advisories/21901
http://secunia.com/advisories/22054
http://secunia.com/advisories/22187
http://secunia.com/advisories/22268
http://secunia.com/advisories/22882
http://security.gentoo.org/glsa/glsa-200610-02.xml
http://securityreason.com/securityalert/1546
http://securitytracker.com/id?1016829
http://www.adobe.com/support/security/bulletins/apsb06-11.html
http://www.computerterrorism.com/research/ct12-09-2006.htm

Get alerted when CVE-2006-3311 or the next vulnerability affects your stack