CVE-2007-6148 Use-after-free vulnerability in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allows remote attackers to execute arbitrary code via an unspeci...
HighCVSS 10.0
EPSS 8.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allows remote attackers to execute arbitrary code via an unspecified sequence of Real Time Message Protocol (RTMP) requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe connect enterprise server | <= 6 | No fix listed |
| Adobe flash media server 2 | <= 2.0.4 | No fix listed |
References
- 20080212 Adobe Flash Media Server 2 Memory Corruption Vulnerability third-party-advisory
- 28946 third-party-advisory
- 28947 patch third-party-advisory vendor-advisory
- www.adobe.com
- www.adobe.com patch
- 27762 vdb-entry
- 1019398 vdb-entry
- ADV-2008-0538 vdb-entry
- ADV-2008-0539 vdb-entry