Adobe Flash Media Server 2 vulnerabilities

7 CVEs affecting Adobe Flash Media Server 2, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-2220, published 2010-08-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-6149, published 2008-02-13. High severity, CVSS 10.0. EPSS: 11.8% chance of exploitation in the next 30 days. Multiple integer overflows in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allow remote attackers to execute arbitrary code via a Real Time…
CVE-2007-6148, published 2008-02-13. High severity, CVSS 10.0. EPSS: 8.4% chance of exploitation in the next 30 days. Use-after-free vulnerability in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allows remote attackers to execute arbitrary code via an…
CVE-2007-6431, published 2008-02-13. High severity, CVSS 10.0. EPSS: 4.6% chance of exploitation in the next 30 days. Unspecified vulnerability in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allows remote attackers to "take control of the affected system" via unspecified…
CVE-2010-2217, published 2010-08-11. High severity, CVSS 10.0. EPSS: 4.5% chance of exploitation in the next 30 days. Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to execute arbitrary code via unspecified vectors, related to a "JS method vulnerability."
CVE-2010-2220, published 2010-08-11. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via unspecified vectors, related to an "input validation issue."
CVE-2010-2219, published 2010-08-11. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service (memory consumption) via unknown vectors.
CVE-2010-2218, published 2010-08-11. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via unspecified vectors, related to a "JS method issue."