CVE-2010-3635

Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to execute arbitrary code via unspecified vectors, related to a "segmentation fault vulnerability."

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.adobe.com/support/security/bulletins/apsb10-27.html	Patch Vendor Advisory
http://www.securityfocus.com/bid/44753
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11333

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:adobe:flash_media_server:3.0:::::::*
	cpe:2.3:a:adobe:flash_media_server:3.0.1:::::::*
	cpe:2.3:a:adobe:flash_media_server:3.0.2:::::::*
	cpe:2.3:a:adobe:flash_media_server:3.0.3:::::::*
	cpe:2.3:a:adobe:flash_media_server:3.0.4:::::::*
	cpe:2.3:a:adobe:flash_media_server:3.0.5:::::::*
	cpe:2.3:a:adobe:flash_media_server:3.0.6:::::::*
	cpe:2.3:a:adobe:flash_media_server:3.5:::::::*
	cpe:2.3:a:adobe:flash_media_server:3.5.1:::::::*
	cpe:2.3:a:adobe:flash_media_server:3.5.2:::::::*
	cpe:2.3:a:adobe:flash_media_server:3.5.3:::::::*
	cpe:2.3:a:adobe:flash_media_server:3.5.4:::::::*
	cpe:2.3:a:adobe:flash_media_server:4.0:::::::*

History

No history.

Information

Published : 2010-11-10 03:00

Updated : 2017-09-19 01:31

NVD link : CVE-2010-3635

Mitre link : CVE-2010-3635

CVE.ORG link : CVE-2010-3635

JSON object : View

Products Affected

adobe

flash_media_server

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2010-3635", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-11-10T03:00:02.443", "references": [{"url": "http://www.adobe.com/support/security/bulletins/apsb10-27.html", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@adobe.com"}, {"url": "http://www.securityfocus.com/bid/44753", "source": "psirt@adobe.com"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11333", "source": "psirt@adobe.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to execute arbitrary code via unspecified vectors, related to a \"segmentation fault vulnerability.\""}, {"lang": "es", "value": "Adobe Flash Media Server (FMS) 3.0.x en versiones anteriores a la 3.0.7, 3.5.x en versiones anteriores a la 3.5.5 y 4.0.x en versiones anteriores a la 4.0.1 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de vectores no especificados, relacionados con una \"vulnerabilidad de fallo de segmentaci\u00f3n\"."}], "lastModified": "2017-09-19T01:31:29.377", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:adobe:flash_media_server:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE4A07B6-E5DA-4781-ABB3-DB2663E2A737"}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84681400-0CBD-41D1-94D0-B9045958793D"}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:3.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "29A5E8DC-E664-4FAF-9ED9-7191433F01E5"}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:3.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7718612E-7563-4E7B-B8F1-0DA6DAA74E97"}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:3.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CCFF63A0-DCF8-484A-A8B0-010ECED76CED"}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:3.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F8F7D253-8577-474A-B8FF-425CE5FE9002"}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:3.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9BBE9663-2BB4-4533-9678-DCC2C59F0C1A"}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "897B12DA-8749-44F7-AA1E-AB1F01BB205E"}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:3.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8334A448-0DFF-4571-81BC-81ADEDBD9D7C"}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:3.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65D4F566-8F2D-4803-B19C-294306CA7852"}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:3.5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "898F42A4-93D4-441A-8DEE-FB935255D5AC"}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:3.5.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B82E319-660D-422B-B0BD-ECADF2DF6DCB"}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5CA17FE1-B380-456D-9FE9-5DB52AA48FD2"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@adobe.com"}