CVE-2006-3311 : Detail

CVE-2006-3311

68.8%V3
Network
2006-09-12
21h00 +00:00
2018-10-18
12h57 +00:00
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote attackers to execute arbitrary code via a long, dynamically created string in a SWF movie.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Products Mentioned

Configuraton 0

Adobe>>Flash_player >> Version To (including) 8.0.24.0

Adobe>>Flash_player >> Version 8

    Adobe>>Flash_player >> Version mx_2004

      Adobe>>Flex_sdk >> Version 1.5

      References

      http://www.vupen.com/english/advisories/2006/3573
      Tags : vdb-entry, x_refsource_VUPEN
      http://secunia.com/advisories/22054
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://www.us-cert.gov/cas/techalerts/TA06-318A.html
      Tags : third-party-advisory, x_refsource_CERT
      http://secunia.com/advisories/22268
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://www.vupen.com/english/advisories/2006/4507
      Tags : vdb-entry, x_refsource_VUPEN
      http://www.kb.cert.org/vuls/id/451380
      Tags : third-party-advisory, x_refsource_CERT-VN
      http://www.securityfocus.com/bid/19980
      Tags : vdb-entry, x_refsource_BID
      http://secunia.com/advisories/22187
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://www.vupen.com/english/advisories/2006/3852
      Tags : vdb-entry, x_refsource_VUPEN
      http://secunia.com/advisories/22882
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://secunia.com/advisories/21865
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://securityreason.com/securityalert/1546
      Tags : third-party-advisory, x_refsource_SREASON
      http://securitytracker.com/id?1016829
      Tags : vdb-entry, x_refsource_SECTRACK
      http://secunia.com/advisories/21901
      Tags : third-party-advisory, x_refsource_SECUNIA
      http://www.redhat.com/support/errata/RHSA-2006-0674.html
      Tags : vendor-advisory, x_refsource_REDHAT
      http://www.vupen.com/english/advisories/2006/3577
      Tags : vdb-entry, x_refsource_VUPEN
      http://www.us-cert.gov/cas/techalerts/TA06-275A.html
      Tags : third-party-advisory, x_refsource_CERT
      http://security.gentoo.org/glsa/glsa-200610-02.xml
      Tags : vendor-advisory, x_refsource_GENTOO