Adobe Flash Media Server (FMS) before 3.5.7, and 4.x before 4.0.3, allows attackers to cause a denial of service (memory corruption) via unspecified vectors.
Conclusion & alert: CVE-2011-2132 is rated High Exploit Risk (69/100): CVSS Medium severity, with high exploitation likelihood (EPSS 8.69%, 94th percentile). Core evidence: 1 public exploit reference(s) are indexed (Exploit-DB). Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
| EDB-ID | Source | Kind | Published | Link |
|---|---|---|---|---|
| 36037 | exploit_db | edb | 2011-08-09 | Exploit-DB ↗ |
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-06-15 | 7.77% | 8.69% | +0.92% |
| 2 | 2026-04-20 | 6.85% | 7.77% | +0.93% |
| 3 | 2025-11-28 | — | 6.85% | — |
Full EPSS history (15 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 5.0 | 2.0 | MEDIUM |
|
10.0 | 2.9 | [email protected] |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| adobe | flash_media_server | <= 3.5.6 | cpe:2.3:a:adobe:flash_media_server:*:*:*:*:*:*:*:* |
| adobe | flash_media_server | 2.0 | cpe:2.3:a:adobe:flash_media_server:2.0:*:*:*:*:*:*:* |
| adobe | flash_media_server | 2.0.1 | cpe:2.3:a:adobe:flash_media_server:2.0.1:*:*:*:*:*:*:* |
| adobe | flash_media_server | 2.0.2 | cpe:2.3:a:adobe:flash_media_server:2.0.2:*:*:*:*:*:*:* |
| adobe | flash_media_server | 2.0.3 | cpe:2.3:a:adobe:flash_media_server:2.0.3:*:*:*:*:*:*:* |
| adobe | flash_media_server | 2.0.4 | cpe:2.3:a:adobe:flash_media_server:2.0.4:*:*:*:*:*:*:* |
| adobe | flash_media_server | 2.0.5 | cpe:2.3:a:adobe:flash_media_server:2.0.5:*:*:*:*:*:*:* |
| adobe | flash_media_server | 3.0 | cpe:2.3:a:adobe:flash_media_server:3.0:*:*:*:*:*:*:* |
| adobe | flash_media_server | 3.0.1 | cpe:2.3:a:adobe:flash_media_server:3.0.1:*:*:*:*:*:*:* |
| adobe | flash_media_server | 3.0.2 | cpe:2.3:a:adobe:flash_media_server:3.0.2:*:*:*:*:*:*:* |
| adobe | flash_media_server | 3.0.3 | cpe:2.3:a:adobe:flash_media_server:3.0.3:*:*:*:*:*:*:* |
| adobe | flash_media_server | 3.0.4 | cpe:2.3:a:adobe:flash_media_server:3.0.4:*:*:*:*:*:*:* |
| adobe | flash_media_server | 3.0.5 | cpe:2.3:a:adobe:flash_media_server:3.0.5:*:*:*:*:*:*:* |
| adobe | flash_media_server | 3.0.6 | cpe:2.3:a:adobe:flash_media_server:3.0.6:*:*:*:*:*:*:* |
| adobe | flash_media_server | 3.0.7 | cpe:2.3:a:adobe:flash_media_server:3.0.7:*:*:*:*:*:*:* |
| adobe | flash_media_server | 3.5 | cpe:2.3:a:adobe:flash_media_server:3.5:*:*:*:*:*:*:* |
| adobe | flash_media_server | 3.5.1 | cpe:2.3:a:adobe:flash_media_server:3.5.1:*:*:*:*:*:*:* |
| adobe | flash_media_server | 3.5.2 | cpe:2.3:a:adobe:flash_media_server:3.5.2:*:*:*:*:*:*:* |
| adobe | flash_media_server | 3.5.3 | cpe:2.3:a:adobe:flash_media_server:3.5.3:*:*:*:*:*:*:* |
| adobe | flash_media_server | 3.5.4 | cpe:2.3:a:adobe:flash_media_server:3.5.4:*:*:*:*:*:*:* |
| adobe | flash_media_server | 3.5.5 | cpe:2.3:a:adobe:flash_media_server:3.5.5:*:*:*:*:*:*:* |
| adobe | flash_media_server | 4.0 | cpe:2.3:a:adobe:flash_media_server:4.0:*:*:*:*:*:*:* |
| adobe | flash_media_server | 4.0.1 | cpe:2.3:a:adobe:flash_media_server:4.0.1:*:*:*:*:*:*:* |
| adobe | flash_media_server | 4.0.2 | cpe:2.3:a:adobe:flash_media_server:4.0.2:*:*:*:*:*:*:* |
| URL | Tags |
|---|---|
| http://www.adobe.com/support/security/bulletins/apsb11-20.html | Patch Vendor Advisory |
| http://www.us-cert.gov/cas/techalerts/TA11-222A.html | US Government Resource |