Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service (web browser crash) via malformed content in a Flash Shockwave (.SWF) file, as demonstrated by by ROT13 encoding the body of the file but not the headers.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Flash_player | Macromedia | 4.0_r12 (including) | 4.0_r12 (including) |
| Flash_player | Macromedia | 5.0 (including) | 5.0 (including) |
| Flash_player | Macromedia | 5.0_r50 (including) | 5.0_r50 (including) |
| Flash_player | Macromedia | 6.0 (including) | 6.0 (including) |
| Flash_player | Macromedia | 6.0.29.0 (including) | 6.0.29.0 (including) |
| Flash_player | Macromedia | 6.0.40.0 (including) | 6.0.40.0 (including) |
| Flash_player | Macromedia | 6.0.47.0 (including) | 6.0.47.0 (including) |