CVE-2009-1365

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-05-01 · updated 2026-06-16

Description

Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before 3.5.2, as used in Flash Media Interactive Server and Flash Media Streaming Server, allows remote attackers to execute arbitrary remote procedures within an ActionScript file on the server via RPC requests.

Affected products

Adobe Flash Media Server: through 3.0.3; 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 3.0 (+4)

References

http://secunia.com/advisories/34878
http://www.adobe.com/support/security/bulletins/apsb09-05.html
http://www.securityfocus.com/bid/34790
http://www.securitytracker.com/id?1022148
http://www.vupen.com/english/advisories/2009/1234
http://secunia.com/advisories/34878
http://www.adobe.com/support/security/bulletins/apsb09-05.html
http://www.securityfocus.com/bid/34790
http://www.securitytracker.com/id?1022148
http://www.vupen.com/english/advisories/2009/1234

Get alerted when CVE-2009-1365 or the next vulnerability affects your stack