RCE in Adobe Flash Media Server
CVE-2010-2217
Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to execute arbitrary code via unspecified vectors, related to a "JS method vulnerability."
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.045 (90.5th percentile) — read the EPSS interpretation.
Affected products
- Adobe Flash_media_server — versions 2.0.4, 3.5.2, 3.5.1
- Adobe Flash_media_server_2 — versions 2.0.4
- Linux Linux_kernel
- Microsoft Windows
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@adobe.com (x_refsource_CONFIRM, Patch, Vendor Advisory)