Adobe Flash Media Server vulnerabilities

13 CVEs affecting Adobe Flash Media Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-2132, published 2011-08-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-2132, published 2011-08-11. Medium severity, CVSS 5.0. EPSS: 8.5% chance of exploitation in the next 30 days. Adobe Flash Media Server (FMS) before 3.5.7, and 4.x before 4.0.3, allows attackers to cause a denial of service (memory corruption) via unspecified vectors.
CVE-2010-3635, published 2010-11-10. High severity, CVSS 10.0. EPSS: 5.9% chance of exploitation in the next 30 days. Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to execute arbitrary code via unspecified vectors, related to a "segmentation fault…
CVE-2010-2217, published 2010-08-11. High severity, CVSS 10.0. EPSS: 4.5% chance of exploitation in the next 30 days. Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to execute arbitrary code via unspecified vectors, related to a "JS method vulnerability."
CVE-2009-3792, published 2009-12-21. High severity, CVSS 10.0. EPSS: 4.1% chance of exploitation in the next 30 days. Directory traversal vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to load arbitrary DLL files via unspecified vectors.
CVE-2010-3634, published 2010-11-10. Medium severity, CVSS 5.0. EPSS: 3.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the edge process in Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to cause a denial of service via…
CVE-2010-3633, published 2010-11-10. Medium severity, CVSS 5.0. EPSS: 3.7% chance of exploitation in the next 30 days. Memory leak in Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to cause a denial of service (memory consumption) via unspecified vectors.
CVE-2009-1365, published 2009-05-01. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before 3.5.2, as used in Flash Media Interactive Server and Flash Media Streaming Server, allows remote attackers to…
CVE-2009-3791, published 2009-12-21. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to cause a denial of service (resource exhaustion) via unknown vectors.
CVE-2010-2220, published 2010-08-11. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via unspecified vectors, related to an "input validation issue."
CVE-2010-2219, published 2010-08-11. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service (memory consumption) via unknown vectors.

Latest

CVE-2011-0612, published 2011-05-16. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. Adobe Flash Media Server (FMS) before 3.5.6, and 4.x before 4.0.2, allows remote attackers to cause a denial of service (XML data corruption) via unspecified vectors.
CVE-2010-2218, published 2010-08-11. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via unspecified vectors, related to a "JS method issue."