Description
Macromedia Breeze Communication Server and Breeze Live Server does 5.1 and earlier not sufficiently validate certain RTMP data, which allows attackers to cause a denial of service (instability or crash), as demonstrated using an alpha release build of Flash Player 8.5 (build 133).
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.macromedia.com/devnet/security/security_zone/mpsb05-10.html ↗
- http://www.vupen.com/english/advisories/2005/2442 ↗
- http://securitytracker.com/id?1015220 ↗
- http://www.macromedia.com/support/breeze/licensed_support.html#item-2 ↗
- http://www.securityfocus.com/bid/15434 ↗
- http://www.osvdb.org/20869 ↗
- http://secunia.com/advisories/17611 ↗