CVE-2005-2628
Macromedia Flash 6 and 7 (Flash.ocx) allows remote attackers to execute arbitrary code via a SWF file with a modified frame type identifier that is used as an out-of-bounds array index to a function pointer.
Date published : 2005-11-05
http://lists.apple.com/archives/security-announce/2006/May/msg00003.html