Adobe Flash Media Server CVE-2010-3635 Remote Memory Corruption Vulnerability

Bugtraq ID:	44753
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2010-3635
Remote:	Yes
Local:	No
Published:	Nov 09 2010 12:00AM
Updated:	Nov 09 2010 12:00AM
Credit:	Amazon Web Services
Vulnerable:	Adobe Flash Media Server 3.5.4 Adobe Flash Media Server 3.5.3 Adobe Flash Media Server 3.5.2 Adobe Flash Media Server 3.5.1 Adobe Flash Media Server 3.0.6 Adobe Flash Media Server 3.0.5 Adobe Flash Media Server 3.0.4 Adobe Flash Media Server 3.0.3 Adobe Flash Media Server 4.0 Adobe Flash Media Server 3.0
Not Vulnerable:	Adobe Flash Media Server 4.0.1 Adobe Flash Media Server 3.5.5 Adobe Flash Media Server 3.0.7

Adobe Flash Media Server CVE-2010-3635 Remote Memory Corruption Vulnerability

Adobe Flash Media Server is prone to a remote memory-corruption vulnerability.

An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

Adobe Flash Media Server CVE-2010-3635 Remote Memory Corruption Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Flash Media Server CVE-2010-3635 Remote Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references for more information.

Adobe Flash Media Server CVE-2010-3635 Remote Memory Corruption Vulnerability

References:

• Flash Media Server Homepage (Adobe)
  
• APSB10-27 Security update available for Adobe Flash Media Server (Adobe)