CVE-2007-6149

KRITISCH 10.0CVE-2007-6149 · Published 13/02/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
connect enterprise server adobe	`≤ 6`	No fix yet
flash media server 2 adobe	`≤ 2.0.4`	No fix yet

Description

Multiple integer overflows in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allow remote attackers to execute arbitrary code via a Real Time Message Protocol (RTMP) message with a crafted integer field that is used for allocation.

References

labs.idefense.com/intelligence/vulnerabilities/display.php
secunia.com/advisories/28946 · Patch
secunia.com/advisories/28947 · Patch
adobe.com/support/security/bulletins/apsb08-03.html
adobe.com/support/security/bulletins/apsb08-04.html · Patch
securityfocus.com/bid/27762 · Patch
securitytracker.com/id
vupen.com/english/advisories/2008/0538/references
vupen.com/english/advisories/2008/0539
exchange.xforce.ibmcloud.com/vulnerabilities/40471

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free