CVE-2007-6149 Multiple integer overflows in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allow remote attackers to execute arbitrary code via a Real Time M...
HighCVSS 10.0
EPSS 11.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allow remote attackers to execute arbitrary code via a Real Time Message Protocol (RTMP) message with a crafted integer field that is used for allocation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe connect enterprise server | <= 6 | No fix listed |
| Adobe flash media server 2 | <= 2.0.4 | No fix listed |
References
- 20080212 Adobe Flash Media Server 2 Multiple Integer Overflow Vulnerabilities third-party-advisory
- 28946 patch third-party-advisory vendor-advisory
- 28947 patch third-party-advisory vendor-advisory
- www.adobe.com
- www.adobe.com patch
- 27762 patch vdb-entry
- 1019399 vdb-entry
- ADV-2008-0538 vdb-entry
- ADV-2008-0539 vdb-entry
- adobe-connect-edge-bo(40471) vdb-entry