Adobe Flash Media Server vulnerabilities

13 known vulnerabilities affecting adobe/flash_media_server.

Total CVEs

13

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL3HIGH2MEDIUM8

Vulnerabilities

Page 1 of 1

CVE-2011-2132MEDIUMCVSS 5.0PoC≤ 3.5.6v2.0+22 more2011-08-11

CVE-2011-2132 [MEDIUM] CWE-119 CVE-2011-2132: Adobe Flash Media Server (FMS) before 3.5.7, and 4.x before 4.0.3, allows attackers to cause a denia Adobe Flash Media Server (FMS) before 3.5.7, and 4.x before 4.0.3, allows attackers to cause a denial of service (memory corruption) via unspecified vectors.

CVE-2011-0612MEDIUMCVSS 5.0≤ 3.5.5v2.0+20 more2011-05-16

CVE-2011-0612 [MEDIUM] CWE-399 CVE-2011-0612: Adobe Flash Media Server (FMS) before 3.5.6, and 4.x before 4.0.2, allows remote attackers to cause Adobe Flash Media Server (FMS) before 3.5.6, and 4.x before 4.0.2, allows remote attackers to cause a denial of service (XML data corruption) via unspecified vectors.

CVE-2010-3635CRITICALCVSS 10.0v3.0v3.0.1+11 more2010-11-10

CVE-2010-3635 [CRITICAL] CWE-94 CVE-2010-3635: Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to execute arbitrary code via unspecified vectors, related to a "segmentation fault vulnerability."

CVE-2010-3633MEDIUMCVSS 5.0v3.0v3.0.1+11 more2010-11-10

CVE-2010-3633 [MEDIUM] CWE-399 CVE-2010-3633: Memory leak in Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x befo Memory leak in Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to cause a denial of service (memory consumption) via unspecified vectors.

CVE-2010-3634MEDIUMCVSS 5.0v3.0v3.0.1+11 more2010-11-10

CVE-2010-3634 [MEDIUM] CVE-2010-3634: Unspecified vulnerability in the edge process in Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, Unspecified vulnerability in the edge process in Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to cause a denial of service via unknown vectors.

CVE-2010-2217CRITICALCVSS 10.0≤ 3.0.5v2.0+14 more2010-08-11

CVE-2010-2217 [CRITICAL] CWE-94 CVE-2010-2217: Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to execute arb Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to execute arbitrary code via unspecified vectors, related to a "JS method vulnerability."

CVE-2010-2219MEDIUMCVSS 5.0≤ 3.0.5v2.0+14 more2010-08-11

CVE-2010-2219 [MEDIUM] CWE-399 CVE-2010-2219: Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, al Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service (memory consumption) via unknown vectors.

CVE-2010-2218MEDIUMCVSS 5.0≤ 3.0.5v2.0+14 more2010-08-11

CVE-2010-2218 [MEDIUM] CVE-2010-2218: Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a den Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via unspecified vectors, related to a "JS method issue."

CVE-2010-2220MEDIUMCVSS 5.0≤ 3.0.5v2.0+14 more2010-08-11

CVE-2010-2220 [MEDIUM] CVE-2010-2220: Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a den Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via unspecified vectors, related to an "input validation issue."

CVE-2009-3792CRITICALCVSS 10.0≤ 3.5.2v2.0+11 more2009-12-21

CVE-2009-3792 [CRITICAL] CWE-22 CVE-2009-3792: Directory traversal vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to Directory traversal vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to load arbitrary DLL files via unspecified vectors.

CVE-2009-3791HIGHCVSS 7.5≤ 3.5.2v2.0+11 more2009-12-21

CVE-2009-3791 [HIGH] CWE-400 CVE-2009-3791: Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to cause a Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to cause a denial of service (resource exhaustion) via unknown vectors.

CVE-2009-1365HIGHCVSS 7.5≤ 3.0.3v2.0.1+9 more2009-05-01

CVE-2009-1365 [HIGH] CVE-2009-1365: Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before 3.5.2, as Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before 3.5.2, as used in Flash Media Interactive Server and Flash Media Streaming Server, allows remote attackers to execute arbitrary remote procedures within an ActionScript file on the server via RPC requests.

CVE-2008-5109MEDIUMCVSS 5.0v3.0v3.52008-11-25

CVE-2008-5109 [MEDIUM] CWE-16 CVE-2008-5109: The default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF Verification for The default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF Verification for (1) RTMPE and (2) RTMPTE sessions, which makes it easier for remote attackers to make copies of video content via stream-capture software.