Adobe Flash Media Server (CVE-2010-2217) Remote Code Execution Vulnerability

Bugtraq ID:	42352
Class:	Unknown
CVE:	CVE-2010-2217
Remote:	Yes
Local:	No
Published:	Aug 10 2010 12:00AM
Updated:	Aug 10 2010 12:00AM
Credit:	Dirk Neely of Stickam
Vulnerable:	Adobe Flash Media Server 3.5.3 Adobe Flash Media Server 3.5.2 Adobe Flash Media Server 3.5.1 Adobe Flash Media Server 3.0.5 Adobe Flash Media Server 3.0.4 Adobe Flash Media Server 3.0.3 Adobe Flash Media Server 3.0
Not Vulnerable:	Adobe Flash Media Server 3.5.4 Adobe Flash Media Server 3.0.6

Adobe Flash Media Server (CVE-2010-2217) Remote Code Execution Vulnerability

Adobe Flash Media Server is prone to a remote code-execution vulnerability.

An attacker can exploit these issues to execute arbitrary code and compromise the affected application.

These issues affect Flash Media Server (FMS) versions prior to 3.5.4 and 3.0.6.

NOTE: This issue was previously covered in BID 42344 (Adobe Flash Media Server Multiple Remote Security Vulnerabilities) but has been given its own record to better document it.

Adobe Flash Media Server (CVE-2010-2217) Remote Code Execution Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Flash Media Server (CVE-2010-2217) Remote Code Execution Vulnerability

Solution:
Vendor updates are available. Please see the referenced advisory for more information.

Adobe Flash Media Server (CVE-2010-2217) Remote Code Execution Vulnerability

References:

• Flash Media Server Homepage (Adobe)
  
• APSB10-19 Security Update Available for Adobe Flash Media Server (Adobe)