CERT-MU :Advisories

Home | Search | FAQ | Site Map | Contact Us

|| Hotline : 800 2378 || To contact CERT-MU send e-mail on --> info[at]cert-mu.gov.mu || To report incident e-mail on --> incident[at]cert-mu.gov.mu || To report Vulnerabilities send e-mail on --> Vulnerability[at]cert-mu.gov.mu ||

Charter & Mission

CERT-MU Services

Constituency

Authority

Incident Reporting

Vulnerability Reporting

Incident Statistics Forms

Vol. 2, Feb 2012

Vol. 1, Oct 2011

World CERTs

Security Sites

Security Tools

Antivirus Resources

Email Abuse

Network Abuse

Anti-Spam Initiative

Cyber Security Portal

Safer Internet Day

Computer Security Day

National Computer Board

Authorized to use CERT(TM) - CERT is a mark owned by Carnegie Mellon University

CERT-MU AD-2009-18

Multiple Vulnerabilities in Adobe Flash Media Server

Original issue date: 22 December, 2009

Overview

Multiple vulnerabilities have been reported in Adobe Flash Media Server (FMS), which could allow a remote attacker to cause a denial of service conditions, execute an arbitrary code or take complete control of an affected system.

Description

Resource Exhaustion Remote Denial of Service Vulnerability

This vulnerability is caused due to an unspecified error in Adobe Flash Media Server. A remote attacker could exploit this vulnerability by sending a specially crafted data to consume excessive amount of CPU resources. Successful exploitation of this vulnerability could allow a remote attacker to cause Denial of Service (DoS) conditions.

Adobe Flash Media Server Directory Traversal Vulnerability

This vulnerability is caused due to improper sanitization of user supplied input in Adobe Flash Media Server. A remote attacker could exploit this vulnerability via directory traversal attacks to load a specially crafted DLLs onto an affected server. Successful exploitation of this vulnerability could allow a remote attacker to execute an arbitrary code.

Software Affected