CVE-2010-2217: Code Injection
Published Aug 11, 2010
·Updated
Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to execute arbitrary code via unspecified vectors, related to a "JS method vulnerability."
Affected Software
20 affected components
Adobe Flash Media Server<=3.0.5
Adobe Flash Media Server=2.0
Adobe Flash Media Server=2.0.1
Adobe Flash Media Server=2.0.2
Adobe Flash Media Server=2.0.3
Adobe Flash Media Server=2.0.4
Adobe Flash Media Server=2.0.5
Adobe Flash Media Server=3.0
Adobe Flash Media Server=3.0.1
Adobe Flash Media Server=3.0.2
Adobe Flash Media Server=3.0.3
Adobe Flash Media Server=3.0.4
Adobe Flash Media Server=3.5
Adobe Flash Media Server=3.5.1
Adobe Flash Media Server=3.5.2
Adobe Flash Media Server=3.5.3
Adobe Flash Media Server 2
Adobe Flash Media Server 2=2.0.4
Linux Linux kernel
Microsoft Windows
Remediation
Event History
Aug 11, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
06:47 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-2217?
The severity of CVE-2010-2217 is considered high due to the potential for arbitrary code execution.
2
How do I fix CVE-2010-2217?
To fix CVE-2010-2217, upgrade Adobe Flash Media Server to version 3.0.6 or 3.5.4 or later.
3
What software is affected by CVE-2010-2217?
CVE-2010-2217 affects multiple versions of Adobe Flash Media Server, specifically versions below 3.0.6 and 3.5.x before 3.5.4.
4
What are the potential impacts of CVE-2010-2217?
The potential impacts of CVE-2010-2217 include the execution of arbitrary code, which could compromise the server.
5
Is there a patch available for CVE-2010-2217?
Yes, Adobe has released patches for CVE-2010-2217 that address the vulnerability.