PT-2005-4641 · Macromedia · Macromedia Flash Communication Server Mx+1

Published 2005-11-29 · Updated 2008-09-05 · CVE-2005-3901

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Macromedia Flash Communication Server MX versions 1.0 through 1.5

Description The issue is related to insufficient validation of certain RTMP data, which can be exploited by attackers to cause instability or crash the system. This has been demonstrated using a specific build of Flash Player.

Recommendations For Macromedia Flash Communication Server MX versions 1.0 through 1.5, consider implementing additional validation for RTMP data to prevent potential crashes or instability. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2005-3901

Affected Products

Flash Player

Macromedia Flash Communication Server Mx

References · 6

• http://secunia.com/advisories/17612 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3901 · Security Note
• http://securitytracker.com/id?1015219 · Patch
• http://macromedia.com/devnet/security/security_zone/mpsb05-09.html · Vendor Advisory
• http://osvdb.org/20869 · Note
• http://securityfocus.com/bid/15437 · Note