Detections
Analytics
Adobe Flash Media server < 3.0.6 / 3.5.4 Multiple Vulnerabilities (APSB10-19)
high Nessus Network Monitor Plugin ID 5624
Synopsis
The remote host is vulnerable to multiple attack vectors.Description
The remote host is running Adobe Flash Media Server.Versions of Adobe Flash Media Server earlier than 3.0.6 / 3.5.4 are potentially affected by multiple vulnerabilities :
- An issue in a JS method could result in a denial of service condition. (CVE-2010-2218)
- An issue in a JS method could allow arbitrary code execution. (CVE-2010-2217)
- A memory exhaustion issue could lead to a denial of service condition. (CVE-2010-2219)
- An input validation issue could lead to a denial of service condition. (CVE-2010-2220)
Solution
Upgrade to Flash Media Server 3.0.6, 3.5.4, or later.See Also
http://www.adobe.com/support/security/bulletins/apsb10-19.html
Plugin Details
Severity: High
ID: 5624
Family: Web Servers
Published: 8/11/2010
Updated: 3/6/2019
Nessus ID: 48298
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: High
Base Score: 7.3
Temporal Score: 6.4
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:adobe:flash_media_server
Patch Publication Date: 8/10/2010
Vulnerability Publication Date: 8/10/2010
Reference Information
CVE: CVE-2010-2217, CVE-2010-2218, CVE-2010-2219, CVE-2010-2220