Sign inStart freeBook a demo

Macromedia vulnerabilitiesNone on the known-exploited list.

Vendor
The short answer

Macromedia has 116 published vulnerabilities across 25 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Flash Player, with 42. If you run Macromedia software, patch the exploited flaws first.

See the exploited flaws

We keep watching the known-exploited list.

Products

Which Macromedia products have the most vulnerabilities?

Flash Player leads with 42 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.

  1. Flash Player42
  2. Jrun34
  3. Coldfusion25
  4. Shockwave Flash Plugin3
  5. Shockwave3
  6. Sitespring2
  7. Coldfusion Professional2
  8. Breeze2
  9. Coldfusion Fusebox2
  10. Dreamweaver2
Published vulnerabilities
Known exploited

Which Macromedia vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Macromedia's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Macromedia flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 70%
    CVE-2010-3654Critical

    Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and...

    CVSS9.3Published29 Oct 2010
  2. 29%
    CVE-2007-1403High

    Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote attackers to cause a denial of service (Internet Explorer 7 crash) and possibly execute...

    CVSS7.5Published10 Mar 2007
  3. 24%
    CVE-2002-1700Medium

    Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for...

    CVSS4.3Published31 Dec 2002
  4. 11%
    CVE-2002-0665Critical

    Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash (/) in the URL.

    CVSS10.0Published11 Jul 2002
  5. 11%
    CVE-2000-1053Critical

    Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack and directly calling the com.livesoftware.jrun.plugins.JSP JSP servlet.

    CVSS10.0Published11 Dec 2000
  6. 10%
    CVE-2005-3591High

    Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code...

    CVSS7.5Published16 Nov 2005
  7. 9.4%
    CVE-2009-3793Critical

    Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory consumption) or possibly execute...

    CVSS9.3Published15 Jun 2010
  8. 9.1%
    CVE-2002-0801Critical

    Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file.

    CVSS10.0Published12 Aug 2002
  9. 9.0%
    CVE-2010-2167Critical

    Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors...

    CVSS9.3Published15 Jun 2010
  10. 8.7%
    CVE-2010-2185Critical

    Buffer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors.

    CVSS9.3Published15 Jun 2010
Every product

All Macromedia products we track.

20 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.

This directory lists the 20 Macromedia products with at least one tracked version, of 25 in our catalogue.

Precursor Intelligence

Running Macromedia? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

Our catalogue lists 116 published vulnerabilities across 25 products and 77 versions from Macromedia.

None of Macromedia's vulnerabilities is on the list of flaws known to be exploited today.

Flash Player, with 42 published vulnerabilities. Its own page lists the ones known to be exploited.

Create a Precursor Intelligence account and track the Macromedia products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

Keep exploring