Adobe Flash Media Server Two Vulnerabilities

Last Update Date: 16 May 2011 14:24 Release Date: 16 May 2011 6558 Views

RISK: Medium Risk

TYPE: Servers - Media Streaming

Two vulnerabilities have been identified in Adobe Flash Media Server, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system.

A memory corruption error which can lead to arbitrary code execution.
An XML data corruption, leading to a denial of service.

Impact

Denial of Service
Remote Code Execution

System / Technologies affected

Adobe Flash Media Server version 4.0.1 and prior
Adobe Flash Media Server version 3.5.5 and prior

Solutions

Upgrade to Adobe Flash Media Server version 4.0.2 or 3.5.6 :
http://www.adobe.com/support/flashmediaserver/downloads_updaters.html

Vulnerability Identifier

CVE-2010-3864
CVE-2011-0612

Source

VUPEN
Secunia