PT-2005-4640 · Macromedia · Breeze Live Server+2

Published 2005-11-29 · Updated 2011-03-08 · CVE-2005-3900

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Macromedia Breeze Communication Server and Breeze Live Server versions 5.1 and earlier

Description The issue arises from insufficient validation of certain RTMP data, which can be exploited by attackers to cause instability or crash the system. This has been demonstrated using an alpha release build of Flash Player 8.5.

Recommendations For Macromedia Breeze Communication Server and Breeze Live Server versions 5.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2005-3900

Affected Products

Breeze Live Server

Flash Player

Macromedia Breeze Communication Server

References · 8

• http://securitytracker.com/id?1015220 · Patch
• http://macromedia.com/support/breeze/licensed_support.html#item-2 · Patch
• http://secunia.com/advisories/17611 · Vendor Advisory
• http://securityfocus.com/bid/15434 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-3900 · Security Note
• http://macromedia.com/devnet/security/security_zone/mpsb05-10.html · Vendor Advisory
• http://osvdb.org/20869 · Note
• http://vupen.com/english/advisories/2005/2442 · Note