PT-2005-4640 · Macromedia · Breeze Live Server+2

Publicado 2005-11-29 · Atualizado 2011-03-08 · CVE-2005-3900

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Macromedia Breeze Communication Server and Breeze Live Server versions 5.1 and earlier

Description The issue arises from insufficient validation of certain RTMP data, which can be exploited by attackers to cause instability or crash the system. This has been demonstrated using an alpha release build of Flash Player 8.5.

Recommendations For Macromedia Breeze Communication Server and Breeze Live Server versions 5.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2005-3900

Produtos afetados

Breeze Live Server

Flash Player

Macromedia Breeze Communication Server

Referências · 8

• http://securitytracker.com/id?1015220 · Correção
• http://osvdb.org/20869 · Nota
• http://macromedia.com/support/breeze/licensed_support.html#item-2 · Correção
• http://vupen.com/english/advisories/2005/2442 · Nota
• http://secunia.com/advisories/17611 · Aviso do Fabricante
• http://securityfocus.com/bid/15434 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2005-3900 · Nota de Segurança
• http://macromedia.com/devnet/security/security_zone/mpsb05-10.html · Aviso do Fabricante