CVE-2006-0024

Multiple unspecified vulnerabilities in Adobe Flash Player 8.0.22.0 and earlier allow remote attackers to execute arbitrary code via a crafted SWF file.

Published: 2006-03-15 Last update: 2026-06-16 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2006-0024 is rated Moderate Risk (47.9/100): CVSS Medium severity, with high exploitation likelihood (EPSS 6.60%, 93th percentile). EPSS ranks this CVE among the most likely to be exploited in the near term. High exploitation likelihood—assess exposure and prioritize remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2006-0024

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 14.91% 6.60% -8.31%
2 2025-03-30 18.27% 14.91% -3.36%
3 2025-03-29 — 18.27% —

Full EPSS history (11 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2006-0024

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
5.1 2.0 MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:H)
Exploitation requires uncommon or highly specific conditions.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
 4.9 6.4 [email protected]

Weakness enumeration for CVE-2006-0024

OS Trackers for CVE-2006-0024

vendor priority summary link
gentoo normal CVE-2006-0024: 1 GLSA(s) (200603-20), 1 atom(s) (www-plugins/adobe-flash); latest impact normal. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2006-0024
redhat critical — https://access.redhat.com/security/cve/CVE-2006-0024
ubuntu medium CVE-2006-0024 medium priority: Ubuntu including 1 source packages (flashplugin-nonfree), 4 status rows across 4 suites (dapper, edgy, feisty, upstream): released 3, needs-triage 1. https://ubuntu.com/security/CVE-2006-0024

Affected software / configurations for CVE-2006-0024

Vendor Product Version Raw CPE
macromedia flash_player <= 8.0.22.0 cpe:2.3:a:macromedia:flash_player:*:*:*:*:*:*:*:*
macromedia flash_player 4.0_r12 cpe:2.3:a:macromedia:flash_player:4.0_r12:*:*:*:*:*:*:*
macromedia flash_player 5.0 cpe:2.3:a:macromedia:flash_player:5.0:*:*:*:*:*:*:*
macromedia flash_player 5.0_r50 cpe:2.3:a:macromedia:flash_player:5.0_r50:*:*:*:*:*:*:*
macromedia flash_player 6.0 cpe:2.3:a:macromedia:flash_player:6.0:*:*:*:*:*:*:*
macromedia flash_player 6.0.29.0 cpe:2.3:a:macromedia:flash_player:6.0.29.0:*:*:*:*:*:*:*
macromedia flash_player 6.0.40.0 cpe:2.3:a:macromedia:flash_player:6.0.40.0:*:*:*:*:*:*:*
macromedia flash_player 6.0.47.0 cpe:2.3:a:macromedia:flash_player:6.0.47.0:*:*:*:*:*:*:*
macromedia flash_player 6.0.65.0 cpe:2.3:a:macromedia:flash_player:6.0.65.0:*:*:*:*:*:*:*
macromedia flash_player 6.0.79.0 cpe:2.3:a:macromedia:flash_player:6.0.79.0:*:*:*:*:*:*:*
macromedia flash_player 7.0.19.0 cpe:2.3:a:macromedia:flash_player:7.0.19.0:*:*:*:*:*:*:*
macromedia flash_player 7.0.60.0 cpe:2.3:a:macromedia:flash_player:7.0.60.0:*:*:*:*:*:*:*
macromedia flash_player 7.0.61.0 cpe:2.3:a:macromedia:flash_player:7.0.61.0:*:*:*:*:*:*:*
macromedia flash_player 7.0_r19 cpe:2.3:a:macromedia:flash_player:7.0_r19:*:*:*:*:*:*:*

References for CVE-2006-0024

URL Tags
http://docs.info.apple.com/article.html?artnum=307179
http://lists.apple.com/archives/security-announce/2006/May/msg00003.html
http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
http://secunia.com/advisories/19198
http://secunia.com/advisories/19218 Patch Vendor Advisory
http://secunia.com/advisories/19259
http://secunia.com/advisories/19328
http://secunia.com/advisories/20045
http://secunia.com/advisories/20077
http://secunia.com/advisories/28136
http://securitytracker.com/id?1015770
http://www.gentoo.org/security/en/glsa/glsa-200603-20.xml
http://www.kb.cert.org/vuls/id/945060 US Government Resource
http://www.macromedia.com/devnet/security/security_zone/apsb06-03.html Patch Vendor Advisory
http://www.novell.com/linux/security/advisories/2006_15_flashplayer.html
http://www.opera.com/docs/changelogs/windows/854/
http://www.osvdb.org/23908
http://www.redhat.com/support/errata/RHSA-2006-0268.html Vendor Advisory
http://www.securityfocus.com/bid/17106
http://www.securityfocus.com/bid/17951
http://www.us-cert.gov/cas/techalerts/TA06-075A.html US Government Resource
http://www.us-cert.gov/cas/techalerts/TA06-129A.html US Government Resource
http://www.us-cert.gov/cas/techalerts/TA06-132A.html US Government Resource
http://www.us-cert.gov/cas/techalerts/TA07-352A.html US Government Resource
http://www.vupen.com/english/advisories/2006/0952
http://www.vupen.com/english/advisories/2006/1262
http://www.vupen.com/english/advisories/2006/1744
http://www.vupen.com/english/advisories/2006/1779
http://www.vupen.com/english/advisories/2007/4238
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-020
https://exchange.xforce.ibmcloud.com/vulnerabilities/25005
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1894
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1922
cvelogic Threat Intelligence