Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malformed tag length specifiers in a SWF file.
https://exchange.xforce.ibmcloud.com/vulnerabilities/5826
http://archives.neohapsis.com/archives/bugtraq/2000-12/0491.html