PT-2005-4641 · Macromedia · Macromedia Flash Communication Server Mx+1

Publicado 2005-11-29 · Atualizado 2008-09-05 · CVE-2005-3901

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Macromedia Flash Communication Server MX versions 1.0 through 1.5

Description The issue is related to insufficient validation of certain RTMP data, which can be exploited by attackers to cause instability or crash the system. This has been demonstrated using a specific build of Flash Player.

Recommendations For Macromedia Flash Communication Server MX versions 1.0 through 1.5, consider implementing additional validation for RTMP data to prevent potential crashes or instability. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2005-3901

Produtos afetados

Flash Player

Macromedia Flash Communication Server Mx

Referências · 6

• http://osvdb.org/20869 · Nota
• http://securityfocus.com/bid/15437 · Nota
• http://secunia.com/advisories/17612 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-3901 · Nota de Segurança
• http://securitytracker.com/id?1015219 · Correção
• http://macromedia.com/devnet/security/security_zone/mpsb05-09.html · Aviso do Fabricante