Sony Vaio Media Server vulnerabilities

2 CVEs affecting Sony Vaio Media Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-4290, published 2006-08-22.

More from Sony.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-4289, published 2006-08-22. High severity, CVSS 10.0. EPSS: 6.1% chance of exploitation in the next 30 days. Buffer overflow in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to execute arbitrary code via unspecified vectors.
• CVE-2006-4290, published 2006-08-22. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Directory traversal vulnerability in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to gain sensitive information via unspecified vectors.