Adobe Flash Media Server Multiple Code Execution and DoS Vulnerabilities
Last Update Date:
28 Jan 2011
Release Date:
12 Aug 2010
5406
Views
RISK: Medium Risk
Multiple vulnerabilitieshave been identified in Adobe Flash Media Server, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system.
1. Due to an unspecified error related to a JS method, which could allow denial of service attacks.
2. Due to an unspecified error related to a JS method, which could lead to arbitrary code execution.
3. Due to an unspecified memory exhaustion error, which could allow denial of service attacks.
4. Due to an unspecified input validation error, which could allow denial of service attacks.
Impact
- Denial of Service
- Remote Code Execution
System / Technologies affected
- Adobe Flash Media Server version 3.5.3 and prior (Windows and UNIX)
- Adobe Flash Media Server version 3.0.5 and prior (Windows and UNIX)
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Upgrade to Adobe Flash Media Server version 3.5.4 or 3.0.6 :
- http://www.adobe.com/support/flashmediaserver/downloads_updaters.html
Vulnerability Identifier
Source
Related Link
Share with