{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2009-04-30T00:00:00", "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before 3.5.2, as used in Flash Media Interactive Server and Flash Media Streaming Server, allows remote attackers to execute arbitrary remote procedures within an ActionScript file on the server via RPC requests."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2009-05-14T09:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "34790", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/34790"}, {"name": "34878", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/34878"}, {"name": "ADV-2009-1234", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2009/1234"}, {"name": "1022148", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1022148"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.adobe.com/support/security/bulletins/apsb09-05.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2009-1365", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before 3.5.2, as used in Flash Media Interactive Server and Flash Media Streaming Server, allows remote attackers to execute arbitrary remote procedures within an ActionScript file on the server via RPC requests."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "34790", "refsource": "BID", "url": "http://www.securityfocus.com/bid/34790"}, {"name": "34878", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/34878"}, {"name": "ADV-2009-1234", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2009/1234"}, {"name": "1022148", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1022148"}, {"name": "http://www.adobe.com/support/security/bulletins/apsb09-05.html", "refsource": "CONFIRM", "url": "http://www.adobe.com/support/security/bulletins/apsb09-05.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T05:13:25.221Z"}, "title": "CVE Program Container", "references": [{"name": "34790", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/34790"}, {"name": "34878", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/34878"}, {"name": "ADV-2009-1234", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2009/1234"}, {"name": "1022148", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1022148"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.adobe.com/support/security/bulletins/apsb09-05.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2009-1365", "datePublished": "2009-05-01T17:00:00", "dateReserved": "2009-04-22T00:00:00", "dateUpdated": "2024-08-07T05:13:25.221Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:adobe:flash_media_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "EAF97B08-1802-4850-893A-C541E6BFB6A2", "versionEndIncluding": "3.0.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "73544702-D995-43BA-92CB-01ED3642D22E", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:2.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "7C5602CE-0860-46EC-9D31-13A83A81476A", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:2.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "CE2057CB-905A-4E81-A9EB-898105B2DF0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:2.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "95E05CA6-B186-4213-A46F-C4E0458B2CA2", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:2.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "9F9D585C-DBD6-4E13-A8FF-E043EC162D9D", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:3.0:*:*:*:*:*:*:*", "matchCriteriaId": "EE4A07B6-E5DA-4781-ABB3-DB2663E2A737", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:3.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "84681400-0CBD-41D1-94D0-B9045958793D", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:3.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "29A5E8DC-E664-4FAF-9ED9-7191433F01E5", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:3.5:*:*:*:*:*:*:*", "matchCriteriaId": "897B12DA-8749-44F7-AA1E-AB1F01BB205E", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:flash_media_server:3.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "8334A448-0DFF-4571-81BC-81ADEDBD9D7C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before 3.5.2, as used in Flash Media Interactive Server and Flash Media Streaming Server, allows remote attackers to execute arbitrary remote procedures within an ActionScript file on the server via RPC requests."}, {"lang": "es", "value": "Vulnerabilidad no especificada en Adobe Flash Media Server (FMS) anterior a v3.0.4 y v3.5.x anterior a v3.5.2, utilizado en Flash Media Interactive Server y Flash Media Streaming Server, permite a atacantes remotos ejecutar procedimientos remotos a su elecci\u00f3n dentro de un archivo ActionScript en el servidor a trav\u00e9s de peticiones RPC."}], "id": "CVE-2009-1365", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2009-05-01T17:30:00.390", "references": [{"source": "cve@mitre.org", "url": "http://secunia.com/advisories/34878"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.adobe.com/support/security/bulletins/apsb09-05.html"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/34790"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1022148"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2009/1234"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/34878"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.adobe.com/support/security/bulletins/apsb09-05.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/34790"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1022148"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2009/1234"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}