RCE in Adobe Flash Media Server

CVE-2010-3635

Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to execute arbitrary code via unspecified vectors, related to a "segmentation fault vulnerability."

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.060 (92.6th percentile) — read the EPSS interpretation.

Affected products

Adobe Flash_media_server — versions 3.0.6, 4.0, 3.5.2
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

psirt@adobe.com (signature, x_refsource_OVAL, vdb-entry)
psirt@adobe.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
psirt@adobe.com (vdb-entry, x_refsource_BID)